Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2019-10849
CVE-2019-10849—
Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.
23RIESGO
abrir ↗
Referência
CVE-2018-19799
CVE-2018-19799—
Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.
23RIESGO
abrir ↗
Referência
CVE-2015-2291
CVE-2015-2291HIGHbajo ataqueransomware
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all
76RIESGO
abrir ↗
Referência
CVE-2017-5631
CVE-2017-5631—
An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr"
38RIESGO
abrir ↗
Referência
CVE-2019-7273
CVE-2019-7273—
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
23RIESGO
abrir ↗
Referência
CVE-2021-30149
CVE-2021-30149—
Composr 10.0.36 allows upload and execution of PHP files.
28RIESGO
abrir ↗
Referência
CVE-2020-1027
CVE-2020-1027HIGHbajo ataque
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Window
71RIESGO
abrir ↗
Referência
CVE-2023-31703
CVE-2023-31703CRITICAL
Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allo
48RIESGO
abrir ↗
Referência
CVE-2014-2045
CVE-2014-2045—
Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30
23RIESGO
abrir ↗
Referência
CVE-2026-13173
CVE-2026-13173LOW
Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation
28RIESGO
abrir ↗
Referência
CVE-2022-21723
CVE-2022-21723CRITICAL
Out-of-bounds read in multipart parsing in PJSIP
48RIESGO
abrir ↗
Referência
CVE-2010-4947
CVE-2010-4947—
Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Dyncms Release 6 - 'x_admindir' Remote File Inclusion
CVE-2006-4589—webappsphp
PHP remote file inclusion vulnerability in 0_admin/modules/Wochenkarte/frontend/index.php in DynCMS 6 and earlier allows
23RIESGO
abrir ↗
Referência
CVE-2010-1528
CVE-2010-1528—
PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
News Bin Pro 4.32 - Article Grabbing Remote Unicode Buffer Overflow
CVE-2007-1569—doswindows
Stack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of service or execute arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities
CVE-2007-6500—webappsasp
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPBasket - 'pro_id' SQL Injection
CVE-2008-3713—webappsphp
SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência
CVE-2005-0575
CVE-2005-0575—
Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possib
23RIESGO
abrir ↗
Referência
CVE-2010-5002
CVE-2010-5002—
Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remot
23RIESGO
abrir ↗
Referência
CVE-2019-9593
CVE-2019-9593—
A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2015-2370
CVE-2015-2370—
The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP
23RIESGO
abrir ↗
Referência
CVE-2025-34095
CVE-2025-34095CRITICAL
Mako Server v2.5 and v2.6 OS Command Injection via examples/save.lsp
63RIESGO
abrir ↗
Referência
CVE-2025-34095
CVE-2025-34095CRITICAL
Mako Server v2.5 and v2.6 OS Command Injection via examples/save.lsp
63RIESGO
abrir ↗
Referência
CVE-2013-1804
CVE-2013-1804—
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência
CVE-2012-4771
CVE-2012-4771—
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ScriptMagix Lyrics 2.0 - 'index.php?recid' SQL Injection
CVE-2007-1616—webappsphp
SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2016-1861
CVE-2016-1861—
The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privi
23RIESGO
abrir ↗
Referência
CVE-2014-3153
CVE-2014-3153HIGHbajo ataque
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff
98RIESGO
abrir ↗
Referência
CVE-2015-1060
CVE-2015-1060—
Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect
23RIESGO
abrir ↗
Referência
CVE-2026-16290
CVE-2026-16290MEDIUM
ProfileGrid < 6.0.0.0 - Unauthenticated Group Member List Disclosure via pm_get_all_users_from_group
33RIESGO
abrir ↗
← anteriorpágina 420 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.