Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2010-1069
CVE-2010-1069—
SQL injection vulnerability in games/game.php in ProArcadeScript allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2010-2915
CVE-2010-2915—
SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-5047
CVE-2010-5047—
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-5047
CVE-2010-5047—
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fastpublish CMS 1.9999 - Local File Inclusion / SQL Injection
CVE-2008-4519—webappsphp
Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute a
23RIESGO
abrir ↗
Referência
CVE-2013-1466
CVE-2013-1466—
Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência
CVE-2015-4072
CVE-2015-4072—
Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre Simple CMS - Authentication Bypass
CVE-2008-5058—webappsphp
SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2008-5336
CVE-2008-5336—
SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RaidenFTPd 2.4 build 3620 - Remote Denial of Service
CVE-2008-6186—doswindows
Stack-based buffer overflow in RaidenFTPD 2.4 build 3620 allows remote authenticated users to cause a denial of service
23RIESGO
abrir ↗
Referência
CVE-2009-4625
CVE-2009-4625—
SQL injection vulnerability in the updateOnePage function in components/com_bfsurvey_pro/controller.php in BF Survey Pro
23RIESGO
abrir ↗
Referência
CVE-2010-2915
CVE-2010-2915—
SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-1046
CVE-2010-1046—
Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2010-1062
CVE-2010-1062—
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magi
23RIESGO
abrir ↗
Referência
CVE-2018-8908
CVE-2018-8908—
An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CS
23RIESGO
abrir ↗
Referência
CVE-2019-3501
CVE-2019-3501—
The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards pag
23RIESGO
abrir ↗
Referência
CVE-2014-3434
CVE-2014-3434—
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,
23RIESGO
abrir ↗
Referência
CVE-2026-86716
CVE-2026-86716MEDIUM
Cesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow
33RIESGO
abrir ↗
Referência✓ VexDay Proof
PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service
CVE-2007-2494—doswindows
Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote
23RIESGO
abrir ↗
Referência
CVE-2026-101052
CVE-2026-101052MEDIUM
refly-ai refly JWT Token app.config.ts hard-coded credentials
33RIESGO
abrir ↗
Referência
CVE-2026-86675
CVE-2026-86675MEDIUM
itsourcecode Sales and Inventory System us_edit.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2012-10038
CVE-2012-10038CRITICAL
Auxilium RateMyPet Arbitrary File Upload RCE
63RIESGO
abrir ↗
Referência✓ VexDay Proof
Kmita Tellfriend 2.0 - 'file' Remote File Inclusion
CVE-2008-2198—webappsphp
PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when regi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass
CVE-2008-4613—webappsasp
SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eSHOP100 - 'SUB' SQL Injection
CVE-2008-5190—webappsphp
SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OpenX 2.6 - 'bannerid' Blind SQL Injection
CVE-2008-6163—webappsphp
SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2010-1043
CVE-2010-1043—
Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary lo
23RIESGO
abrir ↗
Referência
CVE-2010-2336
CVE-2010-2336—
index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the
23RIESGO
abrir ↗
Referência
CVE-2010-2920
CVE-2010-2920—
Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allow
38RIESGO
abrir ↗
Referência
CVE-2010-3742
CVE-2010-3742—
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attac
23RIESGO
abrir ↗
← anteriorpágina 403 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.