Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2013-10033
CVE-2013-10033CRITICAL
Kimai 0.9.2 db_restore.php SQL Injection
63RIESGO
abrir ↗
Referência
CVE-2013-10033
CVE-2013-10033CRITICAL
Kimai 0.9.2 db_restore.php SQL Injection
63RIESGO
abrir ↗
Referência
CVE-2013-10033
CVE-2013-10033CRITICAL
Kimai 0.9.2 db_restore.php SQL Injection
63RIESGO
abrir ↗
Referência
CVE-2010-0695
CVE-2010-0695—
Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Online Web Building 2.0 - 'id' SQL Injection
CVE-2007-1058—webappsasp
SQL injection vulnerability in user_pages/page.asp in Online Web Building 2.0 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2012-1498
CVE-2012-1498—
Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to h
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Minerva Mod 2.0.21 build 238a - SQL Injection
CVE-2007-1555—webappsphp
SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ClanSphere 2007.4 - 'cat_id' SQL Injection
CVE-2007-5061—webappsphp
SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
sk.log 0.5.3 - 'skin_url' Remote File Inclusion
CVE-2007-5089—webappsphp
PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Quick.CMS.Lite 0.5 - 'id' SQL Injection
CVE-2009-1410—webappsphp
SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2014-9141
CVE-2014-9141—
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which all
23RIESGO
abrir ↗
Referência
CVE-2026-90701
CVE-2026-90701MEDIUM
subhajitkhan online-clinic-management-system listdoctor.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-102248
CVE-2026-102248MEDIUM
Rebuild Login Endpoint login improper authentication
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Carbon Communities 2.4 - Multiple Vulnerabilities
CVE-2008-1895—webappsasp
Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RevokeBB 1.0 RC4 - Blind SQL Injection / Hash Retrieve
CVE-2007-3051—webappsphp
SQL injection vulnerability in inc/class_users.php in RevokeSoft RevokeBB 1.0 RC4 and earlier allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2022-50919
CVE-2022-50919CRITICAL
Tdarr 2.00.15 - Command Injection
48RIESGO
abrir ↗
Referência✓ VexDay Proof
Chupix CMS 0.2.3 - 'repertoire' Remote File Inclusion
CVE-2007-5139—webappsphp
PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when register_globals is enabled, a
23RIESGO
abrir ↗
Referência
CVE-2008-6101
CVE-2008-6101—
SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2009-1225
CVE-2009-1225—
Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebFileExplorer 3.1 - 'db.mdb' Database Disclosure
CVE-2009-1495—webappsphp
Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
myPHPNuke < 1.8.8_8rc2 - Cross-Site Scripting / SQL Injection
CVE-2008-4088—webappsphp
SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2008-5736
CVE-2008-5736—
Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p
23RIESGO
abrir ↗
Referência
CVE-2008-5736
CVE-2008-5736—
Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p
23RIESGO
abrir ↗
Referência
CVE-2010-1721
CVE-2010-1721—
SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! al
23RIESGO
abrir ↗
Referência
CVE-2020-26629
CVE-2020-26629CRITICAL
A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows
48RIESGO
abrir ↗
Referência
CVE-2026-56101
CVE-2026-56101MEDIUM
OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS
33RIESGO
abrir ↗
Referência
CVE-2005-4416
CVE-2005-4416—
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência
CVE-2026-101264
CVE-2026-101264CRITICAL
Ziroom ZHOME A0101 set_passwd command injection
48RIESGO
abrir ↗
Referência
CVE-2010-4844
CVE-2010-4844—
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2026-14925
CVE-2026-14925HIGH
Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download
41RIESGO
abrir ↗
← anteriorpágina 461 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.