Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.233 exploits
Referência
CVE-2008-4046
CVE-2008-4046—
SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Referência
CVE-2013-6079
CVE-2013-6079—
Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (applic
23RIESGO
abrir ↗
Referência
CVE-2013-6079
CVE-2013-6079—
Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (applic
23RIESGO
abrir ↗
Referência
CVE-2013-6079
CVE-2013-6079—
Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (applic
23RIESGO
abrir ↗
Referência✓ VexDay Proof
aspWebLinks 2.0 - SQL Injection / Admin Pass Change
CVE-2006-2847—webappsasp
SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WonderCMS 3.1.3 - 'content' Persistent Cross-Site Scripting
CVE-2020-29233—webappsphp
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
campus virtual-lms - Cross-Site Scripting / SQL Injection
CVE-2009-2149—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2012-5334
CVE-2012-5334—
SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2016-1885
CVE-2016-1885—
Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1
23RIESGO
abrir ↗
Referência
CVE-2016-1885
CVE-2016-1885—
Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1
23RIESGO
abrir ↗
Referência
CVE-2026-10220
CVE-2026-10220MEDIUM
NousResearch hermes-agent skills_tool.py skill_view injection
33RIESGO
abrir ↗
Referência
CVE-2026-8113
CVE-2026-8113MEDIUM
8421bit MiniClaw executeSkillScript kernel.ts isPathInside path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-8112
CVE-2026-8112MEDIUM
8421bit MiniClaw kernel.ts executeCognitivePulse os command injection
33RIESGO
abrir ↗
Referência
CVE-2014-10019
CVE-2014-10019—
Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Ga
23RIESGO
abrir ↗
Referência
CVE-2017-9150
CVE-2017-9150—
The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks value
23RIESGO
abrir ↗
Referência
CVE-2022-50691
CVE-2022-50691CRITICAL
MiniDVBLinux 5.4 Remote Root Command Execution via commands.sh
48RIESGO
abrir ↗
Referência✓ VexDay Proof
FlexBB 0.5.5 - '/inc/start.php?_COOKIE' SQL Bypass
CVE-2006-1978—webappsphp
SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2015-4119
CVE-2015-4119—
Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijac
23RIESGO
abrir ↗
Referência
CVE-2015-4119
CVE-2015-4119—
Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
iG Calendar 1.0 - 'user.php?id' SQL Injection
CVE-2007-0130—webappsphp
SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2026-4252
CVE-2026-4252CRITICAL
Tenda AC8 IPv6 check_is_ipv6 ip address for authentication
48RIESGO
abrir ↗
Referência✓ VexDay Proof
Okul Web Otomasyon Sistemi 4.0.1 - SQL Injection
CVE-2007-0305—webappsasp
SQL injection vulnerability in etkinlikbak.asp in Okul Web Otomasyon Sistemi 4.0.1 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FreeBSD mcweject 0.9 'Eject' - Local Buffer Overflow / Local Privilege Escalation
CVE-2007-1719—localbsd
Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to
23RIESGO
abrir ↗
Referência
CVE-2017-10273
CVE-2017-10273—
Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: Deployment). Supported versi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wolioCMS - Authentication Bypass / SQL Injection
CVE-2007-4156—webappsphp
Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via (1) the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Command Execution
CVE-2008-4049—remotewindows
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remot
23RIESGO
abrir ↗
Referência
CVE-2009-4567
CVE-2009-4567—
Multiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated u
23RIESGO
abrir ↗
Referência
CVE-2009-4567
CVE-2009-4567—
Multiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated u
23RIESGO
abrir ↗
Referência
CVE-2008-5689
CVE-2008-5689—
tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (pa
23RIESGO
abrir ↗
Referência
CVE-2010-2609
CVE-2010-2609—
SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to exe
23RIESGO
abrir ↗
← anteriorpágina 412 / 742siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.