Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência✓ VexDay Proof
Affiliate Software Java 4.0 - Authentication Bypass
CVE-2008-6366—webappsasp
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2012-4865
CVE-2012-4865—
Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file.
23RIESGO
abrir ↗
Referência
CVE-2009-4624
CVE-2009-4624—
SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2012-5324
CVE-2012-5324—
Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange
23RIESGO
abrir ↗
Referência
CVE-2013-0135
CVE-2013-0135—
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência✓ VexDay Proof
helplink 0.1.0 - 'show.php' Remote File Inclusion
CVE-2007-5099—webappsphp
PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute a
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Ask.com/AskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow
CVE-2007-5107—remotewindows
Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media
50RIESGO
abrir ↗
Referência✓ VexDay Proof
e107 Plugin BLOG Engine 2.2 - 'uid' SQL Injection
CVE-2008-6438—webappsphp
SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
6rbScript 3.3 - 'section.php' Local File Inclusion
CVE-2008-6453—webappsphp
Directory traversal vulnerability in section.php in 6rbScript 3.3, when magic_quotes_gpc is disabled, allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TAGWORX.CMS 3.00.02 - Multiple SQL Injections
CVE-2008-2394—webappsphp
Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Plaincart 1.1.2 - 'p' SQL Injection
CVE-2008-6469—webappsphp
SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component versioning 1.0.2 - 'id' SQL Injection
CVE-2008-6481—webappsphp
SQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and Mambo allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2018-25402
CVE-2018-25402HIGH
The Open ISES Project 3.30A SQL Injection via inc_types_graph.php
41RIESGO
abrir ↗
Referência
CVE-2024-27199
CVE-2024-27199HIGHbajo ataqueransomware
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
100RIESGO
abrir ↗
Referência
CVE-2018-25401
CVE-2018-25401HIGH
The Open ISES Project 3.30A SQL Injection via sever_graph.php
41RIESGO
abrir ↗
Referência
CVE-2018-25400
CVE-2018-25400HIGH
The Open ISES Project 3.30A SQL Injection via form_post.php
41RIESGO
abrir ↗
Referência
CVE-2026-84935
CVE-2026-84935HIGH
HT Menu < 1.2.7 - Subscriber+ Stored XSS via Menu Settings
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Neostrada Livebox Router - Remote Network Down (PoC)
CVE-2008-6497—doswindows
The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HTT
23RIESGO
abrir ↗
Referência
CVE-2026-67276
CVE-2026-67276CRITICAL
SSH user impersonation possible in Mikrotik RouterOS
48RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component Mambads 1.5 - SQL Injection
CVE-2007-5177—webappsphp
SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote
23RIESGO
abrir ↗
Referência
CVE-2018-25403
CVE-2018-25403HIGH
The Open ISES Project 3.30A SQL Injection via city_graph.php
41RIESGO
abrir ↗
Referência✓ VexDay Proof
zBlog 1.2 - SQL Injection
CVE-2007-6577—webappsphp
Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2008-6500
CVE-2008-6500—
Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
evilboard 0.1a - SQL Injection / Cross-Site Scripting
CVE-2008-0154—webappsphp
SQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Webdevindo-CMS 0.1 - 'hal' SQL Injection
CVE-2008-2875—webappsphp
SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2012-6588
CVE-2012-6588—
SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2026-14333
CVE-2026-14333HIGH
Demi - One Click Demo Import, Backup & Site Migration < 0.0.7 - Unauthenticated Sensitive Data Exposure via Public Backup Directory
41RIESGO
abrir ↗
Referência
CVE-2013-3529
CVE-2013-3529—
Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for Wor
23RIESGO
abrir ↗
Referência
CVE-2026-14319
CVE-2026-14319HIGH
GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure
41RIESGO
abrir ↗
Referência
CVE-2026-13145
CVE-2026-13145MEDIUM
WP Travel < 11.8.1 - Subscriber+ Booking PII Disclosure via IDOR
33RIESGO
abrir ↗
← anteriorpágina 433 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.