Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.233 exploits
Referência
CVE-2012-2575
CVE-2012-2575—
Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Referência
CVE-2013-10064
CVE-2013-10064CRITICAL
ActFax 5.01 RAW Server Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2013-10064
CVE-2013-10064CRITICAL
ActFax 5.01 RAW Server Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2025-34110
CVE-2025-34110CRITICAL
ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure
63RIESGO
abrir ↗
Referência
CVE-2025-34110
CVE-2025-34110CRITICAL
ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure
63RIESGO
abrir ↗
Referência✓ VexDay Proof
Invision Power Board 2.1 < 2.1.6 - SQL Injection (1)
CVE-2006-7071—webappsphp
SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Repository - 'viewcat.php' SQL Injection
CVE-2007-1847—webappsphp
SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2011-1100
CVE-2011-1100—
Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute
23RIESGO
abrir ↗
Referência
CVE-2025-2907
CVE-2025-2907CRITICAL
Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update
63RIESGO
abrir ↗
Referência
CVE-2023-3048
CVE-2023-3048CRITICAL
IDOR in TMT's Lockcell
48RIESGO
abrir ↗
Referência
CVE-2010-2510
CVE-2010-2510—
SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2005-3686
CVE-2005-3686—
SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2009-3057
CVE-2009-3057—
Multiple cross-site scripting (XSS) vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BXCP 0.3.0.4 - 'where' SQL Injection
CVE-2006-3394—webappsphp
SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2010-2511
CVE-2010-2511—
SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Powies MatchMaker 4.05 - 'matchdetail.php' SQL Injection
CVE-2006-6039—webappsphp
SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to exe
23RIESGO
abrir ↗
Referência
CVE-2012-5334
CVE-2012-5334—
SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2016-1885
CVE-2016-1885—
Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1
23RIESGO
abrir ↗
Referência
CVE-2016-1885
CVE-2016-1885—
Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1
23RIESGO
abrir ↗
Referência
CVE-2026-10220
CVE-2026-10220MEDIUM
NousResearch hermes-agent skills_tool.py skill_view injection
33RIESGO
abrir ↗
Referência
CVE-2026-8113
CVE-2026-8113MEDIUM
8421bit MiniClaw executeSkillScript kernel.ts isPathInside path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-8112
CVE-2026-8112MEDIUM
8421bit MiniClaw kernel.ts executeCognitivePulse os command injection
33RIESGO
abrir ↗
Referência
CVE-2014-10019
CVE-2014-10019—
Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Ga
23RIESGO
abrir ↗
Referência
CVE-2017-9150
CVE-2017-9150—
The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks value
23RIESGO
abrir ↗
Referência
CVE-2022-50691
CVE-2022-50691CRITICAL
MiniDVBLinux 5.4 Remote Root Command Execution via commands.sh
48RIESGO
abrir ↗
Referência✓ VexDay Proof
FlexBB 0.5.5 - '/inc/start.php?_COOKIE' SQL Bypass
CVE-2006-1978—webappsphp
SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2015-4119
CVE-2015-4119—
Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijac
23RIESGO
abrir ↗
Referência
CVE-2015-4119
CVE-2015-4119—
Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
iG Calendar 1.0 - 'user.php?id' SQL Injection
CVE-2007-0130—webappsphp
SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2026-4252
CVE-2026-4252CRITICAL
Tenda AC8 IPv6 check_is_ipv6 ip address for authentication
48RIESGO
abrir ↗
← anteriorpágina 414 / 742siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.