Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência✓ VexDay Proof
Cain & Abel 4.9.24 - '.rdp' Local Stack Overflow
CVE-2008-5405—localwindows
Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier,
50RIESGO
abrir ↗
Referência
CVE-2015-6102
CVE-2015-6102—
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi
23RIESGO
abrir ↗
Referência
CVE-2015-7890
CVE-2015-7890—
Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung
23RIESGO
abrir ↗
Referência
CVE-2017-0059
CVE-2017-0059MEDIUMbajo ataque
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via
75RIESGO
abrir ↗
Referência
CVE-2026-105257
CVE-2026-105257LOW
LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDOR
28RIESGO
abrir ↗
Referência✓ VexDay Proof
chCounter 3.1.3 - Authentication Bypass
CVE-2009-1347—webappsphp
Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Zervit Web Server 0.02 - Remote Buffer Overflow (PoC)
CVE-2009-1353—doswindows
Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TotalCalendar 2.4 - 'Include' Local File Inclusion
CVE-2009-1406—webappsphp
Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute
23RIESGO
abrir ↗
Referência
CVE-2022-40684
CVE-2022-40684CRITICALbajo ataqueransomware
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Amevents - SQL Injection
CVE-2008-5768—webappsphp
SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2026-113378
CVE-2026-113378MEDIUM
mcollina mcp-ripgrep Advanced Search Tool index.ts os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-67617
CVE-2026-67617MEDIUM
Microweber CMS 2.0.20 Stored XSS via tag_names Parameter
33RIESGO
abrir ↗
Referência
CVE-2015-0313
CVE-2015-0313HIGHbajo ataque
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows
100RIESGO
abrir ↗
Referência
CVE-2015-9098
CVE-2015-9098—
In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Mon
28RIESGO
abrir ↗
Referência
CVE-2026-112273
CVE-2026-112273MEDIUM
libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name
33RIESGO
abrir ↗
Referência✓ VexDay Proof
OpenEMR 2.8.1 - 'fileroot' Remote File Inclusion
CVE-2006-2929—webappsphp
PHP remote file inclusion vulnerability in contrib/forms/evaluation/C_FormEvaluation.class.php in OpenEMR 2.8.1 and earl
23RIESGO
abrir ↗
Referência
CVE-2012-1900
CVE-2012-1900—
Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2015-0554
CVE-2015-0554—
The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly rest
50RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP weather 2.2.2 - Local File Inclusion / Cross-Site Scripting
CVE-2008-5770—webappsphp
Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to injec
23RIESGO
abrir ↗
Referência
CVE-2009-1493
CVE-2009-1493—
The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and
28RIESGO
abrir ↗
Referência✓ VexDay Proof
iDB 0.2.5pa SVN 243 - 'skin' Local File Inclusion
CVE-2009-1498—webappsphp
Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Alp
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component MailTo - 'article' SQL Injection
CVE-2009-1499—webappsphp
SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Google Chrome 1.0.154.53 - Null Pointer Remote Crash
CVE-2009-1514—doswindows
Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application
23RIESGO
abrir ↗
Referência✓ VexDay Proof
pecio CMS 1.1.5 - 'index.php?language' Local File Inclusion
CVE-2009-1519—webappsphp
Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a
23RIESGO
abrir ↗
Referência
CVE-2026-15209
CVE-2026-15209MEDIUM
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.5 - Subscriber+ Cross-User Support Ticket Disclosure via IDOR
33RIESGO
abrir ↗
Referência✓ VexDay Proof
FlushCMS 1.0.0-pre2 - 'class.rich.php' Remote File Inclusion
CVE-2006-3754—webappsphp
PHP remote file inclusion vulnerability in Include/editor/rich_files/class.rich.php in FlushCMS 1.0.0-pre2 and earlier a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MD-Pro 1.0.76 - SQL Injection
CVE-2007-5222—webappsphp
SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2017-15664
CVE-2017-15664—
In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The at
23RIESGO
abrir ↗
Referência
CVE-2017-16895
CVE-2017-16895—
The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper
23RIESGO
abrir ↗
Referência
CVE-2026-112032
CVE-2026-112032MEDIUM
aircheng-org iWebShop-5 util.php search sql injection
33RIESGO
abrir ↗
← anteriorpágina 419 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.