Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2010-4902
CVE-2010-4902—
Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attacke
23RIESGO
abrir ↗
Referência
CVE-2010-4503
CVE-2010-4503—
SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2009-3322
CVE-2009-3322—
The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood o
23RIESGO
abrir ↗
Referência
CVE-2026-101860
CVE-2026-101860HIGH
RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management
41RIESGO
abrir ↗
Referência
CVE-2010-3904
CVE-2010-3904HIGHbajo ataque
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the
91RIESGO
abrir ↗
Referência
CVE-2020-26629
CVE-2020-26629CRITICAL
A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows
48RIESGO
abrir ↗
Referência
CVE-2026-56101
CVE-2026-56101MEDIUM
OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS
33RIESGO
abrir ↗
Referência
CVE-2005-4416
CVE-2005-4416—
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência
CVE-2026-101264
CVE-2026-101264CRITICAL
Ziroom ZHOME A0101 set_passwd command injection
48RIESGO
abrir ↗
Referência
CVE-2010-4844
CVE-2010-4844—
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2026-14925
CVE-2026-14925HIGH
Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download
41RIESGO
abrir ↗
Referência
CVE-2010-4844
CVE-2010-4844—
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2014-2043
CVE-2014-2043—
SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SAPID Gallery 1.0 - 'ROOT_PATH' Remote File Inclusion
CVE-2006-4065—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers
23RIESGO
abrir ↗
Referência
CVE-2026-86512
CVE-2026-86512MEDIUM
java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak
CVE-2007-5225—localsolaris
Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the co
23RIESGO
abrir ↗
Referência
CVE-2026-18601
CVE-2026-18601CRITICAL
GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection
48RIESGO
abrir ↗
Referência
CVE-2010-4145
CVE-2010-4145—
Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remo
23RIESGO
abrir ↗
Referência
CVE-2026-86299
CVE-2026-86299CRITICAL
Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-86239
CVE-2026-86239MEDIUM
liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2007-5181
CVE-2007-5181—
SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2026-101144
CVE-2026-101144MEDIUM
Eleveo Call Recording Software Query Builder searchAction.do access control
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Cisco VPN Client - IPSec Driver Local kernel system pool Corruption (PoC)
CVE-2008-0324—doswindows
Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash)
23RIESGO
abrir ↗
Referência
CVE-2008-0429
CVE-2008-0429—
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPVID 1.1 - Cross-Site Scripting / SQL Injection
CVE-2008-4157—webappsphp
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2020-37052
CVE-2020-37052CRITICAL
AirControl 1.4.2 - PreAuth Remote Code Execution
48RIESGO
abrir ↗
Referência
CVE-2026-101141
CVE-2026-101141MEDIUM
Eleveo Call Recording Software Play Audio audio.jsp cross site scripting
33RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Site Lock 2.0 - Insecure Cookie Handling
CVE-2009-1587—webappsphp
index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by sett
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload
CVE-2009-1609—webappsphp
Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2009-4576
CVE-2009-4576—
SQL injection vulnerability in the BeeHeard (com_beeheard) component 1.x for Joomla! allows remote attackers to execute
23RIESGO
abrir ↗
← anteriorpágina 474 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.