Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência✓ VexDay Proof
e-Vision CMS 2.0.2 - Multiple Local File Inclusions
CVE-2008-6551—webappsphp
Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magic_quotes_gpc is disabled, allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EkinBoard 1.1.0 - Arbitrary File Upload / Authentication Bypass
CVE-2008-7156—webappsphp
EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain
23RIESGO
abrir ↗
Referência
CVE-2010-3422
CVE-2010-3422—
SQL injection vulnerability in the JGen (com_jgen) component 0.9.33 for Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2015-4420
CVE-2015-4420—
Multiple cross-site scripting (XSS) vulnerabilities in Opsview 4.6.2 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ArcaVir 2009 < 9.4.320X.9 - 'ps_drv.sys' Local Privilege Escalation
CVE-2009-1824—localwindows
The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet
23RIESGO
abrir ↗
Referência
CVE-2016-10010
CVE-2016-10010HIGH
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which
41RIESGO
abrir ↗
Referência
CVE-2009-5095
CVE-2009-5095—
PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2010-1712
CVE-2010-1712—
Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers
23RIESGO
abrir ↗
Referência
CVE-2018-7355
CVE-2018-7355—
All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scrip
23RIESGO
abrir ↗
Referência
CVE-2021-22557
CVE-2021-22557MEDIUM
Code execution in SLO Generator via YAML Payload
33RIESGO
abrir ↗
Referência
CVE-2017-14757
CVE-2017-14757—
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might b
23RIESGO
abrir ↗
Referência
CVE-2017-16819
CVE-2017-16819—
A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows re
23RIESGO
abrir ↗
Referência
CVE-2024-49138
CVE-2024-49138HIGHbajo ataque
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RIESGO
abrir ↗
Referência
CVE-2013-10051
CVE-2013-10051CRITICAL
InstantCMS <= 1.6 Remote PHP Code Execution
63RIESGO
abrir ↗
Referência
CVE-2013-10051
CVE-2013-10051CRITICAL
InstantCMS <= 1.6 Remote PHP Code Execution
63RIESGO
abrir ↗
Referência
CVE-2013-10051
CVE-2013-10051CRITICAL
InstantCMS <= 1.6 Remote PHP Code Execution
63RIESGO
abrir ↗
Referência
CVE-2025-6121
CVE-2025-6121CRITICAL
D-Link DIR-632 HTTP POST Request get_pure_content stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2026-76557
CVE-2026-76557MEDIUM
WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options
33RIESGO
abrir ↗
Referência✓ VexDay Proof
EggBlog 3.1.0 - Cookies SQL Injection
CVE-2008-0159—webappsphp
SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2026-67181
CVE-2026-67181MEDIUM
Rouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Transfer-Encoding Header
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Ruby 1.9 - regex engine Remote Socket Memory Leak
CVE-2008-3443—dosmultiple
The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, an
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Dagger CMS 2008 - 'dir_inc' Remote File Inclusion
CVE-2008-6636—webappsphp
PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when re
23RIESGO
abrir ↗
Referência
CVE-2026-11507
CVE-2026-11507MEDIUM
CodeAstro Leave Management System delete_leave_type.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2016-1002
CVE-2016-1002—
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577
28RIESGO
abrir ↗
Referência✓ VexDay Proof
SCMS 1 - Local File Inclusion
CVE-2009-0330—webappsphp
Directory traversal vulnerability in index.php in Simple Content Management System (SCMS) 1 allows remote attackers to i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
pastelcms 0.8.0 - Local File Inclusion / SQL Injection
CVE-2009-1405—webappsphp
Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2009-3424
CVE-2009-3424—
Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when register_globals is enabled, allow remote at
23RIESGO
abrir ↗
Referência
CVE-2010-1744
CVE-2010-1744—
SQL injection vulnerability in product.html in B2B Gold Script allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2017-15287
CVE-2017-15287—
There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouq
38RIESGO
abrir ↗
Referência
CVE-2026-115801
CVE-2026-115801MEDIUM
Kakao khaiii JSON Config File Linear.cpp open out-of-bounds
33RIESGO
abrir ↗
← anteriorpágina 414 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.