Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.058exploits catalogados
35.300CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8607Nuclei 4255Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.166 exploits
Referência✓ VexDay Proof
PhotoKorn Gallery 1.543 - 'pic' SQL Injection
CVE-2008-0614—webappsphp
SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NERO Media Player 1.4.0.35b - '.m3u' File Buffer Overflow (PoC)
CVE-2008-0619—doswindows
Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbi
28RIESGO
abrir ↗
Referência
CVE-2010-1944
CVE-2010-1944—
Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, a
23RIESGO
abrir ↗
Referência
CVE-2010-1946
CVE-2010-1946—
Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_globals is enabled,
23RIESGO
abrir ↗
Referência
CVE-2010-1957
CVE-2010-1957—
Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attack
43RIESGO
abrir ↗
Referência
CVE-2010-1957
CVE-2010-1957—
Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attack
43RIESGO
abrir ↗
Referência
CVE-2010-1977
CVE-2010-1977—
Directory traversal vulnerability in the J!WHMCS Integrator (com_jwhmcs) component 1.5.0 for Joomla! allows remote attac
38RIESGO
abrir ↗
Referência
CVE-2010-1980
CVE-2010-1980—
Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla
43RIESGO
abrir ↗
Referência
CVE-2010-2020
CVE-2010-2020—
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is
23RIESGO
abrir ↗
Referência
CVE-2021-42237
CVE-2021-42237CRITICALbajo ataqueransomware
Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it
100RIESGO
abrir ↗
Referência✓ VexDay Proof
PORAR WebBoard - 'question.asp' SQL Injection
CVE-2008-1039—webappsasp
SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2016-1102
CVE-2016-1102—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RIESGO
abrir ↗
Referência
CVE-2016-1103
CVE-2016-1103—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RIESGO
abrir ↗
Referência
CVE-2016-1104
CVE-2016-1104—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RIESGO
abrir ↗
Referência
CVE-2010-0796
CVE-2010-0796—
SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2010-0796
CVE-2010-0796—
SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2023-22515
CVE-2023-22515CRITICALbajo ataqueransomware
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RIESGO
abrir ↗
Referência
CVE-2021-40539
CVE-2021-40539CRITICALbajo ataqueransomware
Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resulta
100RIESGO
abrir ↗
Referência
CVE-2019-3929
CVE-2019-3929CRITICALbajo ataque
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba
100RIESGO
abrir ↗
Referência
CVE-2019-3929
CVE-2019-3929CRITICALbajo ataque
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba
100RIESGO
abrir ↗
Referência
CVE-2019-25676
CVE-2019-25676HIGH
Ask Expert Script 3.0.5 Cross Site Scripting SQL Injection
41RIESGO
abrir ↗
Referência
CVE-2017-9791
CVE-2017-9791CRITICALbajo ataque
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe
100RIESGO
abrir ↗
Referência
CVE-2010-4185
CVE-2010-4185—
SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2010-4210
CVE-2010-4210—
The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previo
23RIESGO
abrir ↗
Referência
CVE-2023-32560
CVE-2023-32560HIGH
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup
78RIESGO
abrir ↗
Referência
CVE-2023-32560
CVE-2023-32560HIGH
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup
78RIESGO
abrir ↗
Referência
CVE-2020-7209
CVE-2020-7209—
LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.
60RIESGO
abrir ↗
Referência
CVE-2026-61514
CVE-2026-61514CRITICAL
Puwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 23456
48RIESGO
abrir ↗
Referência
CVE-2026-61515
CVE-2026-61515CRITICAL
Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell
48RIESGO
abrir ↗
Referência
CVE-2026-16548
CVE-2026-16548MEDIUM
Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint
33RIESGO
abrir ↗
← anteriorpágina 371 / 739siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.