Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.166exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.078VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2018-25252
CVE-2018-25252MEDIUM
FTP Voyager 16.2.0 Denial of Service via Malformed Site Profile
33RIESGO
abrir ↗
Referência
CVE-2018-10709
CVE-2018-10709—
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RIESGO
abrir ↗
Referência
CVE-2016-5195
CVE-2016-5195HIGHbajo ataque
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗
Referência✓ VexDay Proof
KML share 1.1 - 'region.php?layer' Remote File Disclosure
CVE-2007-6212—webappsphp
Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a .
23RIESGO
abrir ↗
Referência
CVE-2016-5195
CVE-2016-5195HIGHbajo ataque
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗
Referência
CVE-2009-4597
CVE-2009-4597—
Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote authenticated users to execute
23RIESGO
abrir ↗
Referência
CVE-2009-4601
CVE-2009-4601—
Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2012-1029
CVE-2012-1029—
SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2016-5195
CVE-2016-5195HIGHbajo ataque
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗
Referência
CVE-2026-16632
CVE-2026-16632MEDIUM
boazsegev facil.io WebSocket Frame websocket_parser.h websocket_on_protocol_error input validation
33RIESGO
abrir ↗
Referência
CVE-2009-4617
CVE-2009-4617—
Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attacker
23RIESGO
abrir ↗
Referência
CVE-2026-7121
CVE-2026-7121CRITICAL
Totolink A8000RU CGI cstecgi.cgi setWizardCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2016-20056
CVE-2016-20056HIGH
Spy Emergency build 23.0.205 Unquoted Service Path Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2017-8740
CVE-2017-8740—
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current u
45RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke 8.0 Final - 'sid' SQL Injection
CVE-2008-0461—webappsphp
SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Tiger PHP News System 1.0b build 39 - SQL Injection
CVE-2008-0469—webappsphp
SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Web Wiz Rich Text Editor 4.0 - Multiple Vulnerabilities
CVE-2008-0473—webappsasp
RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files v
23RIESGO
abrir ↗
Referência
CVE-2026-14943
CVE-2026-14943HIGH
Password Protected < 2.8.4 - Unauthenticated Sensitive Information Exposure via REST API
41RIESGO
abrir ↗
Referência
CVE-2026-16954
CVE-2026-16954MEDIUM
AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens
33RIESGO
abrir ↗
Referência
CVE-2009-4756
CVE-2009-4756—
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execu
23RIESGO
abrir ↗
Referência
CVE-2010-4849
CVE-2010-4849—
SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2026-6993
CVE-2026-6993MEDIUM
go-kratos http.DefaultServeMux Fallback server.go NewServer confused deputy
33RIESGO
abrir ↗
Referência
CVE-2026-6992
CVE-2026-6992HIGH
Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection
41RIESGO
abrir ↗
Referência
CVE-2010-4850
CVE-2010-4850—
Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗
Referência
CVE-2010-4850
CVE-2010-4850—
Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗
Referência
CVE-2012-1203
CVE-2012-1203—
Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2026-9393
CVE-2026-9393HIGH
H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-34429
CVE-2026-34429MEDIUM
Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename
33RIESGO
abrir ↗
Referência
CVE-2026-6649
CVE-2026-6649MEDIUM
Qibo CMS headers server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-6648
CVE-2026-6648MEDIUM
Qibo CMS Internal Message cross site scripting
33RIESGO
abrir ↗
← anteriorpágina 504 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.