Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Packeteer PacketShaper and PolicyCenter 8.2.2 - 'FILELIST' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer Packe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Jokes and Funny Pictures Script - 'sbcat_id' SQL Injection
SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alkacon OpenCMS 7.0.3 - 'tree_files.jsp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_fi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Surgemail and WebMail 3.0 - 'Page' Remote Format String
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earli
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Recipe Module 1.3 - 'recipeid' SQL Injection
SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpQLAdmin 2.2.7 - Multiple Remote File Inclusions
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zer
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'Comments.asp?FC' SQL Injection
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS Tiny Event 1.01 - 'print' Option SQL Injection
SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Downloads Module - 'sid' SQL Injection
SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'ClassList.asp?Term' SQL Injection
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'Labels.asp?Term' SQL Injection
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zilab Chat and Instant Messaging (ZIM) 2.0/2.1 Server - Multiple Vulnerabilities
The Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0 and 2.1 allows remote attackers to cause a den
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 'prayerlist' Module - 'cid' SQL Injection
SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'GradebookStuScores.asp?GrdBk' SQL Injection
SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sybase MobiLink 10.0.1.3629 - Multiple Heap Buffer Overflow Vulnerabilities
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SmarterTools SmarterMail 4.3 - 'Subject' HTML Injection
Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Facile Forms 1.x - 'catid' SQL Injection
SQL injection vulnerability in the Facile Forms (com_facileforms) component for Joomla! and Mambo allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jinzora 2.7.5 - 'slim.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jinzora 2.7.5 - 'ajax_request.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Google Hack Honeypot File Upload Manager 1.3 - 'delall' Unauthorized File Access
Google Hack Honeypot (GHH) File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jinzora 2.7.5 - 'popup.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jinzora 2.7.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component com_profile - 'oid' SQL Injection
SQL injection vulnerability in index.php in the com_profile component for Joomla! allows remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Web_Links Module - 'cid' SQL Injection
SQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal
Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProjectPier 0.8 - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RunCMS 1.6.1 - 'admin.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin wp-people 2.0 - 'wp-people-popup.php' SQL Injection
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component com_detail - 'id' SQL Injection
SQL injection vulnerability in the com_detail component for Joomla! and Mambo allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component astatsPRO 1.0 - 'refer.php' SQL Injection
SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro) 1.0.1 component for Jo
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.