Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.449exploits catalogados

35.552CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.367 exploits

Referência✓ VexDay Proof

Voodoo chat 1.0RC1b - 'users.dat' Password Disclosure

CVE-2006-6890—webappsphp

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remot

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Vz (Adp) Forum 2.0.3 - Remote Password Disclosure

CVE-2006-6891—webappsphp

Vz (Adp) Forum 2.0.3 stores sensitive information under the web root with insufficient access control, which allows remo

23RIESGO

abrir ↗

Referência

CVE-2017-15973

CVE-2017-15973—

Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Quote&Ordering System 1.0 - 'ordernum' Multiple Vulnerabilities

CVE-2006-6911—webappsasp

SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated users

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor ARCserve - 'tapeeng.exe' Remote Buffer Overflow

CVE-2006-6917—remotewindows

Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote a

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Nitrotech 0.0.3a - Remote Code Execution

CVE-2006-6938—webappsphp

Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities

CVE-2006-6941—webappsphp

index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SCart 2.0 - 'page' Remote Code Execution

CVE-2006-7012—webappsphp

scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parame

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FlashBB 1.1.8 - 'phpbb_root_path' Remote File Inclusion

CVE-2006-7032—webappsphp

PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to exec

23RIESGO

abrir ↗

Referência

CVE-2006-7127

CVE-2006-7127—

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência

CVE-2026-8268

CVE-2026-8268MEDIUM

Open5GS SMF OpenAPI_list_create denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8265

CVE-2026-8265MEDIUM

Tenda AC6 httpd getLogFile get_log_file os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8264

CVE-2026-8264MEDIUM

Tenda AC6 httpd WifiApScan formWifiApScan os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8263

CVE-2026-8263MEDIUM

Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8262

CVE-2026-8262MEDIUM

Devs Palace ERP Online chart-save cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-8261

CVE-2026-8261MEDIUM

Squirrel sqobject.cpp Load heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-8258

CVE-2026-8258MEDIUM

Squirrel sqstdstring.cpp validate_format stack-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-8250

CVE-2026-8250MEDIUM

Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8249

CVE-2026-8249MEDIUM

Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service

33RIESGO

abrir ↗

Referência

CVE-2021-47930

CVE-2021-47930HIGH

Balbooa Joomla Forms Builder 2.0.6 SQL Injection Unauthenticated

41RIESGO

abrir ↗

Referência

CVE-2021-47910

CVE-2021-47910MEDIUM

WordPress Plugin AccessPress Social Icons 1.8.2 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50969

CVE-2022-50969MEDIUM

uBidAuction 2.0.1 mailingLog manage Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50968

CVE-2022-50968MEDIUM

uBidAuction 2.0.1 auctions manage Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50967

CVE-2022-50967MEDIUM

uBidAuction 2.0.1 tickets manage Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2014-5144

CVE-2014-5144—

Cross-site scripting (XSS) vulnerability in Telescope before 0.9.3 allows remote authenticated users to inject arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - '.png' IHDR Block Denial of Service (PoC) (2)

CVE-2006-7210—doswindows

Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - '.png' IHDR Block Denial of Service (PoC) (3)

CVE-2006-7210—doswindows

Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a

28RIESGO

abrir ↗

Referência

CVE-2015-8429

CVE-2015-8429—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RIESGO

abrir ↗

Referência

CVE-2015-8430

CVE-2015-8430—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RIESGO

abrir ↗

Referência

CVE-2026-18813

CVE-2026-18813HIGH

H3C NX15 esps delete command injection

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.