Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2010-4934
CVE-2010-4934—
SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2014-2623
CVE-2014-2623—
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown
60RIESGO
abrir ↗
Referência
CVE-2009-2852
CVE-2009-2852—
WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2009-3574
CVE-2009-3574—
Tuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a lon
23RIESGO
abrir ↗
Referência
CVE-2013-1937
CVE-2013-1937—
Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might
23RIESGO
abrir ↗
Referência
CVE-2020-26829
CVE-2020-26829CRITICAL
SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary conne
48RIESGO
abrir ↗
Referência
CVE-2018-12052
CVE-2018-12052—
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.
23RIESGO
abrir ↗
Referência
CVE-2026-90682
CVE-2026-90682MEDIUM
Matthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-14753
CVE-2026-14753MEDIUM
mjperpinosa stumasy Note Handler/Assignment notes authorization
33RIESGO
abrir ↗
Referência
CVE-2017-2473
CVE-2017-2473—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗
Referência
CVE-2018-6671
CVE-2018-6671MEDIUM
SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability
33RIESGO
abrir ↗
Referência
CVE-2014-125117
CVE-2014-125117CRITICAL
D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE
63RIESGO
abrir ↗
Referência
CVE-2014-125117
CVE-2014-125117CRITICAL
D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE
63RIESGO
abrir ↗
Referência
CVE-2014-125117
CVE-2014-125117CRITICAL
D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE
63RIESGO
abrir ↗
Referência
CVE-2025-7097
CVE-2025-7097CRITICAL
Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection
48RIESGO
abrir ↗
Referência
CVE-2025-7097
CVE-2025-7097CRITICAL
Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection
48RIESGO
abrir ↗
Referência
CVE-2019-10226
CVE-2019-10226—
HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to th
23RIESGO
abrir ↗
Referência
CVE-2011-3492
CVE-2011-3492—
Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial
60RIESGO
abrir ↗
Referência
CVE-2011-4024
CVE-2011-4024—
Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2024-23749
CVE-2024-23749HIGH
KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insuffic
41RIESGO
abrir ↗
Referência
CVE-2019-10226
CVE-2019-10226—
HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to th
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DivX Web Player 1.3.0 - 'npdivx32.dll' Remote Denial of Service
CVE-2007-1294—doswindows
A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Live Music Plus 1.1.0 - 'id' SQL Injection
CVE-2008-3352—webappsphp
SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2010-1466
CVE-2010-1466—
Directory traversal vulnerability in scr/soustab.php in openUrgence Vaccin 1.03 allows remote attackers to read arbitrar
23RIESGO
abrir ↗
Referência
CVE-2018-17382
CVE-2018-17382—
SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.
23RIESGO
abrir ↗
Referência
CVE-2018-17382
CVE-2018-17382—
SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.
23RIESGO
abrir ↗
Referência
CVE-2020-6756
CVE-2020-6756CRITICAL
languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to re
53RIESGO
abrir ↗
Referência
CVE-2023-39026
CVE-2023-39026—
Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker t
43RIESGO
abrir ↗
Referência
CVE-2026-87894
CVE-2026-87894MEDIUM
Rox Appointment Booking 1.0.9 - 1.2.2 - Unauthenticated Customer PII Disclosure via IDOR
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Snort 2.6.1.1/2.6.1.2/2.7.0 - 'fragementation' Remote Denial of Service
CVE-2007-1398—dosmultiple
The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip
23RIESGO
abrir ↗
← anteriorpágina 415 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.