Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados
35.370CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.175 exploits
Referência✓ VexDay Proof
Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution
CVE-2008-2950—locallinux
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not
28RIESGO
abrir ↗
Referência✓ VexDay Proof
CMS Mini 0.2.2 - Multiple Local File Inclusions
CVE-2008-2961—webappsphp
Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitrar
23RIESGO
abrir ↗
Referência
CVE-2012-2588
CVE-2012-2588—
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência
CVE-2022-41073
CVE-2022-41073HIGHbajo ataqueransomware
Windows Print Spooler Elevation of Privilege Vulnerability
71RIESGO
abrir ↗
Referência
CVE-2010-2910
CVE-2010-2910—
SQL injection vulnerability in the Ozio Gallery (com_oziogallery) component for Joomla! allows remote attackers to execu
23RIESGO
abrir ↗
Referência
CVE-2013-5117
CVE-2013-5117—
SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Smeego 1.0 - 'Cookie lang' Local File Inclusion
CVE-2008-2352—webappsphp
Directory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled, allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pixie CMS - Cross-Site Scripting / SQL Injection
CVE-2009-1066—webappsphp
SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2009-3542
CVE-2009-3542—
Directory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows remote attackers to incl
23RIESGO
abrir ↗
Referência
CVE-2022-23366
CVE-2022-23366—
HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.
23RIESGO
abrir ↗
Referência
CVE-2010-4924
CVE-2010-4924—
PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to ex
23RIESGO
abrir ↗
Referência
CVE-2018-18794
CVE-2018-18794—
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
23RIESGO
abrir ↗
Referência
CVE-2018-18794
CVE-2018-18794—
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
23RIESGO
abrir ↗
Referência
CVE-2018-12739
CVE-2018-12739—
In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.
23RIESGO
abrir ↗
Referência
CVE-2012-4262
CVE-2012-4262—
Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗
Referência
CVE-2012-4262
CVE-2012-4262—
Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗
Referência
CVE-2018-6023
CVE-2018-6023—
Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi act
23RIESGO
abrir ↗
Referência
CVE-2018-6023
CVE-2018-6023—
Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi act
23RIESGO
abrir ↗
Referência
CVE-2012-5899
CVE-2012-5899—
Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2012-3837
CVE-2012-3837—
Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earl
23RIESGO
abrir ↗
Referência
CVE-2010-5047
CVE-2010-5047—
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-5047
CVE-2010-5047—
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2022-24112
CVE-2022-24112CRITICALbajo ataque
apisix/batch-requests plugin allows overwriting the X-REAL-IP header
100RIESGO
abrir ↗
Referência
CVE-2010-1216
CVE-2010-1216—
PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and earlier, when register_glob
23RIESGO
abrir ↗
Referência
CVE-2026-5315
CVE-2026-5315MEDIUM
Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-5314
CVE-2026-5314MEDIUM
Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2010-2915
CVE-2010-2915—
SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-2915
CVE-2010-2915—
SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2008-5336
CVE-2008-5336—
SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2009-4625
CVE-2009-4625—
SQL injection vulnerability in the updateOnePage function in components/com_bfsurvey_pro/controller.php in BF Survey Pro
23RIESGO
abrir ↗
← anteriorpágina 391 / 740siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.