Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.112exploits catalogados
40.548CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.072VulnCheck XDB 10.121Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2010-1351
CVE-2010-1351—
Multiple PHP remote file inclusion vulnerabilities in Nodesforum 1.033 and 1.045, when register_globals is enabled, allo
23RIESGO
abrir ↗
Referência
CVE-2010-4507
CVE-2010-4507—
Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 a
23RIESGO
abrir ↗
Referência
CVE-2010-1945
CVE-2010-1945—
Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, all
23RIESGO
abrir ↗
Referência
CVE-2026-61523
CVE-2026-61523HIGH
WebsiteBaker CMS < 2.13.10 Code Injection via Droplets Editor
41RIESGO
abrir ↗
Referência
CVE-2026-19436
CVE-2026-19436HIGH
Ultimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted Purchase
41RIESGO
abrir ↗
Referência
CVE-2026-10178
CVE-2026-10178MEDIUM
code-projects Online Music Site AdminEditAlbum.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2012-1787
CVE-2012-1787—
Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attack
23RIESGO
abrir ↗
Referência
SaiTeja-Erukude/CVE-2026-57845-hf-datasets-rce
CVE-2026-57845HIGH
Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder
41RIESGO
abrir ↗
Referência
CVE-2008-7120
CVE-2008-7120—
SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NuSchool 1.0 - 'CampusNewsDetails.asp' SQL Injection
CVE-2006-5887—webappsasp
SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2026-67200
CVE-2026-67200HIGH
Perspective 5.0.0 Path Traversal via cwd_static_file_handler
41RIESGO
abrir ↗
Referência
CVE-2011-5140
CVE-2011-5140—
Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2018-25426
CVE-2018-25426HIGH
WinMTR 0.91 Denial of Service via Buffer Overflow
41RIESGO
abrir ↗
Referência✓ VexDay Proof
ClipShare 2.6 - Remote User Password Change
CVE-2008-7188—webappsphp
ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the pr
23RIESGO
abrir ↗
Referência
CVE-2026-10063
CVE-2026-10063HIGH
TRENDnet TEW-432BRP formWPS stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2017-15956
CVE-2017-15956—
ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php.
23RIESGO
abrir ↗
Referência
CVE-2018-25416
CVE-2018-25416HIGH
AiOPMSD Final 1.0.0 SQL Injection via country.php
41RIESGO
abrir ↗
Referência
CVE-2009-3360
CVE-2009-3360—
Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BolinOS 4.6.1 - Local File Inclusion / Cross-Site Scripting
CVE-2008-1556—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗
Referência
CVE-2008-3561
CVE-2008-3561—
SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NuCommunity 1.0 - 'cl_CatListing.asp' SQL Injection
CVE-2006-5881—webappsasp
SQL injection vulnerability in cl_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2018-5282
CVE-2018-5282—
Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password fie
23RIESGO
abrir ↗
Referência
CVE-2023-6036
CVE-2023-6036CRITICAL
Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass
48RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module PopnupBlog 2.52 - 'postid' Blind SQL Injection
CVE-2007-1979—webappsphp
SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2015-7297
CVE-2015-7297—
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un
60RIESGO
abrir ↗
Referência
CVE-2017-0148
CVE-2017-0148HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2017-15978
CVE-2017-15978—
AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPDirector 0.21 - 'videos.php?id' SQL Injection
CVE-2007-3562—webappsphp
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
mutiple timesheets 5.0 - Multiple Vulnerabilities
CVE-2008-1414—webappsphp
Cross-site scripting (XSS) vulnerability in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to inject
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ViArt Shop 3.5 - 'category_id' SQL Injection
CVE-2008-3369—webappsphp
SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitra
23RIESGO
abrir ↗
← anteriorpágina 487 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.