Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.106exploits catalogados

40.548CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.066VulnCheck XDB 10.121Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2026-13547

CVE-2026-13547MEDIUM

Hanwang e-Face General Management Platform upload.do unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2021-31761

CVE-2021-31761—

Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's ru

35RIESGO

abrir ↗

Referência

CVE-2026-13516

CVE-2026-13516HIGH

Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-83533

CVE-2026-83533MEDIUM

WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment

33RIESGO

abrir ↗

Referência

CVE-2026-13503

CVE-2026-13503MEDIUM

antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal

33RIESGO

abrir ↗

Referência

CVE-2012-10036

CVE-2012-10036CRITICAL

Project Pier <= 0.8.8 Arbitrary File Upload RCE

63RIESGO

abrir ↗

Referência

CVE-2012-10036

CVE-2012-10036CRITICAL

Project Pier <= 0.8.8 Arbitrary File Upload RCE

63RIESGO

abrir ↗

Referência

CVE-2012-10036

CVE-2012-10036CRITICAL

Project Pier <= 0.8.8 Arbitrary File Upload RCE

63RIESGO

abrir ↗

Referência

CVE-2026-13487

CVE-2026-13487MEDIUM

SourceCodester Class and Exam Timetabling System archive.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5776

CVE-2026-5776MEDIUM

Email Encoder < 2.4.7 - Unauthenticated Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2009-2882

CVE-2009-2882—

Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web scr

23RIESGO

abrir ↗

Referência

CVE-2010-0319

CVE-2010-0319—

Cross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary

23RIESGO

abrir ↗

Referência

CVE-2015-7562

CVE-2015-7562—

Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.3 - 'PHP_gd2.dll' imagepsloadfont Local Buffer Overflow (PoC)

CVE-2007-4033—doswindows

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent at

28RIESGO

abrir ↗

Referência

CVE-2008-6924

CVE-2008-6924—

Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2009-4464

CVE-2009-4464—

Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2009-4684

CVE-2009-4684—

Cross-site scripting (XSS) vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script

23RIESGO

abrir ↗

Referência

CVE-2026-8385

CVE-2026-8385MEDIUM

WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback

48RIESGO

abrir ↗

Referência

CVE-2026-12216

CVE-2026-12216MEDIUM

svaarala duktape duk_api_bytecode.c memory corruption

33RIESGO

abrir ↗

Referência

CVE-2010-2156

CVE-2010-2156—

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit)

60RIESGO

abrir ↗

Referência

CVE-2026-71195

CVE-2026-71195CRITICAL

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns th

48RIESGO

abrir ↗

Referência

CVE-2026-113741

CVE-2026-113741MEDIUM

itsourcecode Online Cake Ordering System 404.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2009-2884

CVE-2009-2884—

Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attacker

23RIESGO

abrir ↗

Referência

CVE-2009-3187

CVE-2009-3187—

Cross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arb

23RIESGO

abrir ↗

Referência

CVE-2021-47956

CVE-2021-47956HIGH

EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname

41RIESGO

abrir ↗

Referência

CVE-2020-37242

CVE-2020-37242HIGH

WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx

41RIESGO

abrir ↗

Referência

CVE-2026-12214

CVE-2026-12214HIGH

Qihoo 360 Total Security Nucleus Engine Monitoring Logic RpcStringBindingComposeW protection mechanism

41RIESGO

abrir ↗

Referência✓ VexDay Proof

Seditio CMS 121 - 'pfs.php' Arbitrary File Upload

CVE-2007-4057—webappsphp

Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPAuctionSystem - Cross-Site Scripting / SQL Injection

CVE-2009-0107—webappsphp

Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2011-10010

CVE-2011-10010CRITICAL

QuickShare File Server 1.2.1 Path Traversal RCE

63RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.