Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.240 exploits

Referência

CVE-2010-2141

CVE-2010-2141—

SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2018-10814

CVE-2018-10814—

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.

23RIESGO

abrir ↗

Referência

CVE-2013-7057

CVE-2013-7057—

Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2016-1594

CVE-2016-1594—

Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request

23RIESGO

abrir ↗

Referência

CVE-2017-17621

CVE-2017-17621—

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.

23RIESGO

abrir ↗

Referência

CVE-2025-10156

CVE-2025-10156CRITICAL

PickleScan Security Bypass via Bad CRC in ZIP Archive

48RIESGO

abrir ↗

Referência

CVE-2025-10156

CVE-2025-10156CRITICAL

PickleScan Security Bypass via Bad CRC in ZIP Archive

48RIESGO

abrir ↗

Referência

CVE-2019-25687

CVE-2019-25687CRITICAL

Pegasus CMS 1.0 Remote Code Execution via extra_fields.php

48RIESGO

abrir ↗

Referência

CVE-2020-15600

CVE-2020-15600—

An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password.

23RIESGO

abrir ↗

Referência

CVE-2026-108923

CVE-2026-108923MEDIUM

1024-lab smart-admin Support Config Query queryByKey access control

33RIESGO

abrir ↗

Referência

CVE-2026-109106

CVE-2026-109106MEDIUM

Polaris Office App Document Intake com.infraware.service.m.n.a path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-79630

CVE-2026-79630MEDIUM

WPFunnels < 3.13.0 - Unauthenticated Price Manipulation via Order Bump Product ID Substitution

33RIESGO

abrir ↗

Referência

CVE-2026-18480

CVE-2026-18480HIGH

SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover

41RIESGO

abrir ↗

Referência

CVE-2026-19917

CVE-2026-19917MEDIUM

code-projects Online Food Order System delete_food_items1.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2009-3155

CVE-2009-3155—

Cross-site scripting (XSS) vulnerability in gmap.php in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

S-CMS 1.1 Stable - Insecure Cookie Handling / Mass Page Delete

CVE-2009-0863—webappsphp

SQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência

CVE-2017-17622

CVE-2017-17622—

Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-6433

CVE-2026-6433HIGH

Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCE

56RIESGO

abrir ↗

Referência

CVE-2018-10828

CVE-2018-10828—

An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and wri

23RIESGO

abrir ↗

Referência

CVE-2017-1000366

CVE-2017-1000366—

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causin

23RIESGO

abrir ↗

Referência

CVE-2013-10070

CVE-2013-10070CRITICAL

PHP-Charts v1.0 PHP Code Execution

63RIESGO

abrir ↗

Referência

CVE-2013-10070

CVE-2013-10070CRITICAL

PHP-Charts v1.0 PHP Code Execution

63RIESGO

abrir ↗

Referência

CVE-2013-10070

CVE-2013-10070CRITICAL

PHP-Charts v1.0 PHP Code Execution

63RIESGO

abrir ↗

Referência

CVE-2026-16992

CVE-2026-16992MEDIUM

Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication

33RIESGO

abrir ↗

Referência

CVE-2012-10038

CVE-2012-10038CRITICAL

Auxilium RateMyPet Arbitrary File Upload RCE

63RIESGO

abrir ↗

Referência

CVE-2026-109188

CVE-2026-109188MEDIUM

jshERP through 3.6 Missing Authorization in Master Data Add and Import Endpoints

33RIESGO

abrir ↗

Referência

CVE-2026-108882

CVE-2026-108882MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser

33RIESGO

abrir ↗

Referência

CVE-2025-34089

CVE-2025-34089CRITICAL

Remote for Mac Unauthenticated Remote Code Execution via AppleScript Injection

63RIESGO

abrir ↗

Referência

CVE-2025-34089

CVE-2025-34089CRITICAL

Remote for Mac Unauthenticated Remote Code Execution via AppleScript Injection

63RIESGO

abrir ↗

Referência

CVE-2012-10052

CVE-2012-10052CRITICAL

EGallery 1.2 Arbitrary PHP File Upload

63RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.