Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência✓ VexDay Proof
Pivot 1.40.5 - Dreamwind 'load_template()' Credentials Disclosure
Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗Referência✓ VexDay Proof
Apartment Search Script - Arbitrary File Upload / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject ar
23RIESGO
abrir ↗Referência
CVE-2016-1287
Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0
45RIESGO
abrir ↗Referência✓ VexDay Proof
Ultimate HelpDesk - Cross-Site Scripting / Local File Disclosure
Cross-site scripting (XSS) vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Referência
CVE-2010-4830
SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows r
23RIESGO
abrir ↗Referência
CVE-2014-9415
Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted QE
23RIESGO
abrir ↗Referência
CVE-2016-5847
SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard l
23RIESGO
abrir ↗Referência
CVE-2026-108879
JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter
33RIESGO
abrir ↗Referência
CVE-2026-82925
Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection via Form Signature
41RIESGO
abrir ↗Referência
CVE-2014-9416
Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute
23RIESGO
abrir ↗Referência
CVE-2017-9248
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not
100RIESGO
abrir ↗Referência✓ VexDay Proof
BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow
Stack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote attackers to execute arbi
23RIESGO
abrir ↗Referência✓ VexDay Proof
J-OWAMP Web Interface 2.1b - 'link' Remote File Inclusion
PHP remote file inclusion vulnerability in JOWAMP_ShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated
23RIESGO
abrir ↗Referência✓ VexDay Proof
Fantastic News 2.1.4 - 'news.php' SQL Injection
SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência
CVE-2026-89299
WP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' Parameter
41RIESGO
abrir ↗Referência
CVE-2026-14689
CodeAstro Apartment Visitor Management System add-apartment.php sql injection
33RIESGO
abrir ↗Referência
CVE-2026-14688
itsourcecode Online Hotel Management System login.php sql injection
33RIESGO
abrir ↗Referência
CVE-2026-89213
Llavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' Parameter
41RIESGO
abrir ↗Referência✓ VexDay Proof
OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH
It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Deb
23RIESGO
abrir ↗Referência✓ VexDay Proof
Phorum 3.2.11 - 'common.php' Remote File Inclusion
PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗Referência
CVE-2026-14687
666ghj BettaFish InsightEngine search-result Deduplication agent.py _deduplicate_results partial string comparison
33RIESGO
abrir ↗Referência✓ VexDay Proof
mxBB Module newssuite 1.03 - Remote File Inclusion
PHP remote file inclusion vulnerability in includes/newssuite_constants.php in the NewsSuite 1.03 module for mxBB allows
23RIESGO
abrir ↗Referência
CVE-2008-6740
PHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1 allows remote attackers
23RIESGO
abrir ↗Referência
CVE-2026-14692
SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php save_shop_type sql injection
33RIESGO
abrir ↗Referência
CVE-2026-14691
SourceCodester Multi-Vendor Online Grocery Management System Setting SystemSettings.php update_settings_info code injection
33RIESGO
abrir ↗Referência
CVE-2026-14690
SourceCodester Multi-Vendor Online Grocery Management System Users.php save_users improper authorization
33RIESGO
abrir ↗Referência
CVE-2023-6553
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
85RIESGO
abrir ↗Referência
CVE-2026-87933
DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free
33RIESGO
abrir ↗Referência✓ VexDay Proof
mxBB Module Profile CP 0.91c - Remote File Inclusion
PHP remote file inclusion vulnerability in includes/profilcp_constants.php in the Profile Control Panel (CPanel) module
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.