Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2015-3202
CVE-2015-3202—
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as ro
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AJSquare Free Polling Script - 'DB' Multiple Vulnerabilities
CVE-2008-7044—webappsphp
SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll) Database version allo
23RIESGO
abrir ↗
Referência
CVE-2014-8727
CVE-2014-8727—
Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the "Resource Administrat
23RIESGO
abrir ↗
Referência
CVE-2009-2586
CVE-2009-2586—
Cross-site scripting (XSS) vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência
CVE-2015-3202
CVE-2015-3202—
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as ro
23RIESGO
abrir ↗
Referência
CVE-2009-4206
CVE-2009-4206—
SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2009-4221
CVE-2009-4221—
SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2014-8727
CVE-2014-8727—
Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the "Resource Administrat
23RIESGO
abrir ↗
Referência
CVE-2016-1819
CVE-2016-1819—
Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before 1
23RIESGO
abrir ↗
Referência
CVE-2017-8491
CVE-2017-8491—
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
tellmatic 1.0.7 - Multiple Remote File Inclusions
CVE-2007-6231—webappsphp
Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗
Referência
CVE-2026-9367
CVE-2026-9367MEDIUM
NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
ftp Admin 0.1.0 - Local File Inclusion / Cross-Site Scripting / Authentication Bypass
CVE-2007-6232—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2010-0764
CVE-2010-0764—
SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ftp Admin 0.1.0 - Local File Inclusion / Cross-Site Scripting / Authentication Bypass
CVE-2007-6233—webappsphp
Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and execu
23RIESGO
abrir ↗
Referência
CVE-2009-2593
CVE-2009-2593—
SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2009-2692
CVE-2009-2692—
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke
43RIESGO
abrir ↗
Referência
CVE-2009-3310
CVE-2009-3310—
SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Referência
CVE-2010-1468
CVE-2010-1468—
SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) compo
23RIESGO
abrir ↗
Referência
CVE-2010-1654
CVE-2010-1654—
Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote
23RIESGO
abrir ↗
Referência
CVE-2010-1654
CVE-2010-1654—
Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote
23RIESGO
abrir ↗
Referência
CVE-2010-4946
CVE-2010-4946—
SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência
CVE-2026-9296
CVE-2026-9296MEDIUM
Edimax BR-6428NS POST Request formWlanM system command injection
33RIESGO
abrir ↗
Referência
CVE-2009-4695
CVE-2009-4695—
SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2018-25394
CVE-2018-25394HIGH
Kados R10 GreenBee SQL Injection via update_release.php
41RIESGO
abrir ↗
Referência
CVE-2018-25393
CVE-2018-25393HIGH
Navigate CMS 2.8.5 Path Traversal via navigate_download.php
41RIESGO
abrir ↗
Referência
CVE-2018-25392
CVE-2018-25392HIGH
MaxOn ERP Software 8.x-9.x SQL Injection via nomor Parameter
41RIESGO
abrir ↗
Referência
CVE-2026-87797
CVE-2026-87797MEDIUM
Client Invoicing by Sprout Invoices < 20.8.16 - Subscriber+ Private Note Overwrite via si_edit_private_note
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Snitz Forums 2000 - 'Active.asp' SQL Injection
CVE-2007-6240—webappsasp
SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-4955
CVE-2010-4955—
SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers t
23RIESGO
abrir ↗
← anteriorpágina 471 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.