Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.305exploits catalogados

36.465CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientes populares riesgo

22.910 exploits

Referência

CVE-2018-17553

CVE-2018-17553—

An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs N

60RIESGO

abrir ↗

Referência

CVE-2018-7890

CVE-2018-7890—

A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640). The pu

60RIESGO

abrir ↗

Referência✓ VexDay Proof

XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

CVE-2008-3398—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web sc

23RIESGO

abrir ↗

Referência

CVE-2025-34291

CVE-2025-34291CRITICALbajo ataque

Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

100RIESGO

abrir ↗

Referência

CVE-2015-7709

CVE-2015-7709—

The arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier allows remote attackers to b

60RIESGO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Live Support 1.21 - Admin Credential Retrieve

CVE-2007-2775—webappsphp

AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are m

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Euphonics Audio Player 1.0 (Windows XP SP3) - '.pls' Local Buffer Overflow

CVE-2009-0476—localwindows

Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi

50RIESGO

abrir ↗

Referência

CVE-2016-8740

CVE-2016-8740—

The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2

45RIESGO

abrir ↗

Referência

CVE-2010-1549

CVE-2010-1549—

Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote

60RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Message Queuing Service - RPC Buffer Overflow (MS07-065) (1)

CVE-2007-3039—remotewindows

Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Window

50RIESGO

abrir ↗

Referência

CVE-2018-0769

CVE-2018-0769—

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitra

45RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Message Queuing Service - RPC Buffer Overflow (MS07-065) (2)

CVE-2007-3039—remotewindows

Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Window

50RIESGO

abrir ↗

Referência

CVE-2015-7709

CVE-2015-7709—

The arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier allows remote attackers to b

60RIESGO

abrir ↗

Referência

CVE-2018-10583

CVE-2018-10583—

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically p

60RIESGO

abrir ↗

Referência✓ VexDay Proof

MojoPersonals - Blind SQL Injection

CVE-2008-3403—webappscgi

SQL injection vulnerability in mojoClassified.cgi in MojoPersonals allows remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpLinkat 0.1 - Insecure Cookie Handling / SQL Injection

CVE-2008-3406—webappsphp

SQL injection vulnerability in showcat.php in phpLinkat 0.1 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência

CVE-2019-1622

CVE-2019-1622MEDIUM

Cisco Data Center Network Manager Information Disclosure Vulnerability

70RIESGO

abrir ↗

Referência

CVE-2019-1622

CVE-2019-1622MEDIUM

Cisco Data Center Network Manager Information Disclosure Vulnerability

70RIESGO

abrir ↗

Referência✓ VexDay Proof

CoolPlayer 2.18 - '.m3u' File Local Buffer Overflow

CVE-2008-3408—localwindows

Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

EPShop < 3.0 - 'pid' SQL Injection

CVE-2008-3412—webappsphp

SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência

CVE-2020-6418

CVE-2020-6418HIGHbajo ataque

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corru

100RIESGO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Template Seller Pro 3.25 - Remote Code Execution

CVE-2007-2777—webappsphp

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier all

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Libstats 1.0.3 - 'template_csv.php' Remote File Inclusion

CVE-2007-2779—webappsphp

PHP remote file inclusion vulnerability in template_csv.php in Libstats 1.0.3 and earlier allows remote attackers to exe

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service

CVE-2009-0478—dosmultiple

Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service v

45RIESGO

abrir ↗

Referência✓ VexDay Proof

Audacity 1.2.6 - '.gro' Local Buffer Overflow (PoC)

CVE-2009-0490—doswindows

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacit

28RIESGO

abrir ↗

Referência

CVE-2017-17692

CVE-2017-17692—

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive informat

60RIESGO

abrir ↗

Referência

CVE-2017-17692

CVE-2017-17692—

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive informat

60RIESGO

abrir ↗

Referência✓ VexDay Proof

IceBB 1.0-RC9.2 - Blind SQL Injection / Session Hijacking

CVE-2008-3416—webappsphp

SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FipsCMS Light 2.1 - 'r' SQL Injection

CVE-2008-3417—webappsasp

SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Youtuber Clone - SQL Injection

CVE-2008-3419—webappsphp

SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.