Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.305exploits catalogados

36.465CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientes populares riesgo

22.910 exploits

Referência

CVE-2019-13720

CVE-2019-13720HIGHbajo ataque

Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap

93RIESGO

abrir ↗

Referência

CVE-2019-7442

CVE-2019-7442—

An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault

35RIESGO

abrir ↗

Referência

CVE-2019-8196

CVE-2019-8196—

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier,

28RIESGO

abrir ↗

Referência

CVE-2025-2776

CVE-2025-2776CRITICALbajo ataque

SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

100RIESGO

abrir ↗

Referência✓ VexDay Proof

Philex 0.2.3 - Remote File Inclusion / File Disclosure

CVE-2007-1697—webappsphp

PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute

45RIESGO

abrir ↗

Referência✓ VexDay Proof

Vivotek Motion Jpeg Control - 'MjpegDecoder.dll 2.0.0.13' Remote Overflow

CVE-2007-3167—remotewindows

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Amaya 11.1 - W3C Editor/Browser (defer) Stack Overflow (PoC)

CVE-2009-1209—doswindows

Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script

28RIESGO

abrir ↗

Referência

CVE-2016-1744

CVE-2016-1744—

The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

vsp stats processor 0.45 - 'gamestat.php?gameID' SQL Injection

CVE-2009-1224—webappsphp

SQL injection vulnerability in vsp-core/pub/themes/bismarck/gamestat.php in vsp stats processor 0.45 allows remote attac

23RIESGO

abrir ↗

Referência

CVE-2018-6389

CVE-2018-6389—

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the

45RIESGO

abrir ↗

Referência

CVE-2020-5741

CVE-2020-5741HIGHbajo ataque

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arb

100RIESGO

abrir ↗

Referência★ 62

A PoC exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution (RCE)

CVE-2024-25600CRITICAL

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RIESGO

abrir ↗

Referência

CVE-2019-8452

CVE-2019-8452—

A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security clien

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TubeGuru Video Sharing Script - 'UID' SQL Injection

CVE-2008-3674—webappsphp

SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execut

23RIESGO

abrir ↗

Referência

CVE-2008-5923

CVE-2008-5923—

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência

CVE-2021-4045

CVE-2021-4045CRITICAL

TP-LINK Tapo C200 remote code execution vulnerability

70RIESGO

abrir ↗

Referência✓ VexDay Proof

Check Point Firewall-1 - PKI Web Service HTTP Header Remote Overflow

CVE-2009-1227—doshardware

NOTE: this issue has been disputed by the vendor. Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI

23RIESGO

abrir ↗

Referência

CVE-2017-6326

CVE-2017-6326—

The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an i

60RIESGO

abrir ↗

Referência

CVE-2017-8046

CVE-2017-8046—

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri

60RIESGO

abrir ↗

Referência✓ VexDay Proof

Arcadwy Arcade Script - 'Username' Static Cross-Site Scripting

CVE-2009-1228—webappsphp

Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject

23RIESGO

abrir ↗

Referência

CVE-2019-8926

CVE-2019-8926—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

23RIESGO

abrir ↗

Referência

CVE-2019-8927

CVE-2019-8927—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Ventrilo 3.0.2 - Null Pointer Remote Denial of Service

CVE-2008-3680—dosmultiple

The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of s

23RIESGO

abrir ↗

Referência

CVE-2019-8928

CVE-2019-8928—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userMan

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Studio - 'Msmask32.ocx' ActiveX Remote Buffer Overflow (PoC)

CVE-2008-3704—doswindows

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions befo

50RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Studio - 'Msmask32.ocx' ActiveX Remote Buffer Overflow

CVE-2008-3704—remotewindows

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions befo

50RIESGO

abrir ↗

Referência✓ VexDay Proof

isiAJAX 1 - 'praises.php?id' SQL Injection

CVE-2009-0881—webappsphp

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox 3.0.x - XML Parser Memory Corruption / Denial of Service (PoC)

CVE-2009-1232—doswindows

Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption

23RIESGO

abrir ↗

Referência

CVE-2012-5333

CVE-2012-5333—

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Zeeways ZeeJobsite 2.0 - 'adid' SQL Injection

CVE-2008-3706—webappsphp

SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL comman

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.