Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2018-10718
CVE-2018-10718—
Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote at
35RIESGO
abrir ↗
Referência
CVE-2017-7115
CVE-2017-7115—
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. The issue invo
23RIESGO
abrir ↗
Referência
CVE-2010-4772
CVE-2010-4772—
Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2011-1496
CVE-2011-1496—
tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a f
23RIESGO
abrir ↗
Referência
CVE-2025-34513
CVE-2025-34513CRITICAL
Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated Command Injection
48RIESGO
abrir ↗
Referência
CVE-2018-5333
CVE-2018-5333—
In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning
38RIESGO
abrir ↗
Referência
CVE-2006-4040
CVE-2006-4040—
PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2017-3131
CVE-2017-3131—
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to exec
38RIESGO
abrir ↗
Referência
CVE-2018-6126
CVE-2018-6126—
A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds m
23RIESGO
abrir ↗
Referência
CVE-2019-6714
CVE-2019-6714—
An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in Po
35RIESGO
abrir ↗
Referência
CVE-2023-36355
CVE-2023-36355—
TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6Cfg
35RIESGO
abrir ↗
Referência
CVE-2026-90785
CVE-2026-90785MEDIUM
Dvidelabs flatcc Struct Analysis semantics.c analyze_struct assertion
33RIESGO
abrir ↗
Referência
CVE-2021-41381
CVE-2021-41381—
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
50RIESGO
abrir ↗
Referência
CVE-2013-3482
CVE-2013-3482—
Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.
50RIESGO
abrir ↗
Referência
CVE-2026-112092
CVE-2026-112092MEDIUM
subhajitkhan online-clinic-management-system Doctor Registration doctorregistration.php echo cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-112090
CVE-2026-112090MEDIUM
Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-94294
CVE-2026-94294MEDIUM
App Builder 3.8.4 - 5.7.0 - Unauthenticated Option Write and Redirect via includes/pure.php
33RIESGO
abrir ↗
Referência✓ VexDay Proof
b2 Blog 0.5 - 'b2verifauth.php' Remote File Inclusion
CVE-2006-6830—webappsphp
PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Portail Web PHP 2.5.1.1 - Multiple Inclusion Vulnerabilities
CVE-2008-1068—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2019-17124
CVE-2019-17124—
Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
28RIESGO
abrir ↗
Referência
CVE-2014-4874
CVE-2014-4874—
BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment
23RIESGO
abrir ↗
Referência
CVE-2020-11803
CVE-2020-11803—
An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with th
23RIESGO
abrir ↗
Referência
CVE-2017-15920
CVE-2017-15920—
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer
23RIESGO
abrir ↗
Referência
CVE-2015-6402
CVE-2015-6402—
Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11,
23RIESGO
abrir ↗
Referência
CVE-2020-7384
CVE-2020-7384HIGH
Client-Side Command Injection in Rapid7 Metasploit
68RIESGO
abrir ↗
Referência
CVE-2017-6549
CVE-2017-6549—
Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MDForum 2.0.1 - 'PNSVlang' Remote Code Execution
CVE-2006-6869—webappsphp
Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1 and earlier, when magic_
23RIESGO
abrir ↗
Referência
CVE-2018-10258
CVE-2018-10258—
A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to
23RIESGO
abrir ↗
Referência
CVE-2018-10258
CVE-2018-10258—
A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to
23RIESGO
abrir ↗
Referência
CVE-2021-41773
CVE-2021-41773HIGHbajo ataqueransomware
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RIESGO
abrir ↗
← anteriorpágina 392 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.