Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência✓ VexDay Proof
E-Uploader Pro 1.0 - Multiple SQL Injections
CVE-2008-5075—webappsphp
Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Avahi < 0.6.24 - mDNS Daemon Remote Denial of Service
CVE-2008-5081—dosmultiple
The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 al
50RIESGO
abrir ↗
Referência
CVE-2026-109525
CVE-2026-109525MEDIUM
girishsaraf Online-Appointment-Booking-System submit2 changebookingstatus.php authorization
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Orca 2.0/2.0.2 - 'params.php?gConf[dir][layouts]' Remote File Inclusion
CVE-2008-5167—webappsphp
PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Tips Complete Website 1.2.0 - 'tipid' SQL Injection
CVE-2008-5168—webappsphp
SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2018-5405
CVE-2018-5405—
The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ClipShare Pro 2006-2007 - 'chid' SQL Injection
CVE-2008-5489—webappsphp
SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2021-31933
CVE-2021-31933HIGH
A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a paramete
46RIESGO
abrir ↗
Referência
CVE-2018-5702
CVE-2018-5702—
Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access con
28RIESGO
abrir ↗
Referência
CVE-2021-46424
CVE-2021-46424—
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to de
50RIESGO
abrir ↗
Referência✓ VexDay Proof
Ikon ADManager 2.1 - Remote Database Disclosure
CVE-2008-5596—webappsasp
Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which a
23RIESGO
abrir ↗
Referência
CVE-2026-7519
CVE-2026-7519MEDIUM
Fujian Apex LiveBOS Endpoint UploadImage.do path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7518
CVE-2026-7518MEDIUM
Open5GS AMF SBI Endpoint sdmsubscription-notify amf_namf_callback_handle_sdm_data_change_notify denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-7513
CVE-2026-7513HIGH
UTT HiPER 1200GW formRemoteControl strcpy buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7512
CVE-2026-7512HIGH
UTT HiPER 1200GW formUser strcpy buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2025-71284
CVE-2025-71284CRITICAL
Synway SMG Gateway Management Software OS Command Injection via radius_address
48RIESGO
abrir ↗
Referência
CVE-2026-5409
CVE-2026-5409MEDIUM
Uncontrolled Recursion in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-5408
CVE-2026-5408MEDIUM
Uncontrolled Recursion in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-5406
CVE-2026-5406MEDIUM
Uncontrolled Recursion in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-5407
CVE-2026-5407MEDIUM
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-5654
CVE-2026-5654MEDIUM
Stack-based Buffer Overflow in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-5653
CVE-2026-5653MEDIUM
Heap-based Buffer Overflow in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-6538
CVE-2026-6538MEDIUM
Stack-based Buffer Overflow in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-6534
CVE-2026-6534MEDIUM
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-6533
CVE-2026-6533MEDIUM
Improperly Controlled Sequential Memory Allocation in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-6532
CVE-2026-6532MEDIUM
Buffer Over-read in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-6531
CVE-2026-6531MEDIUM
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2022-0824
CVE-2022-0824HIGH
Improper Access Control to Remote Code Execution in webmin/webmin
78RIESGO
abrir ↗
Referência
CVE-2026-7585
CVE-2026-7585MEDIUM
Open5GS AMF nudm-handler.c amf_nudm_sdm_handle_provisioned denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-7583
CVE-2026-7583MEDIUM
Open5GS BSF context.c bsf_sess_find_by_ipv6prefix denial of service
33RIESGO
abrir ↗
← anteriorpágina 342 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.