Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.620exploits catalogados
35.647CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8693Nuclei 4299Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.429 exploits
Referência✓ VexDay Proof
SiteDepth CMS 3.44 - 'ShowImage.php?name' File Disclosure
CVE-2007-3404—webappsphp
Directory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers to read arbitrary files
23RIESGO
abrir ↗
Referência
CVE-2021-34473
CVE-2021-34473CRITICALbajo ataqueransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Referência
CVE-2023-1389
CVE-2023-1389HIGHbajo ataque
TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i
100RIESGO
abrir ↗
Referência✓ VexDay Proof
WordPress Plugin WassUp 1.4.3 - 'to_date' SQL Injection
CVE-2008-0520—webappsphp
Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Internet Explorer - XML Parsing Remote Buffer Overflow
CVE-2008-4844—remotewindows
Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet
50RIESGO
abrir ↗
Referência
1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting
CVE-2019-14221—webappsphp
1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.
23RIESGO
abrir ↗
Referência
Shopizer 2.16.0 - 'Multiple' Cross-Site Scripting (XSS)
CVE-2021-33561—webappsjava
A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2012-1217
CVE-2012-1217—
Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2006-0441
CVE-2006-0441—
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RIESGO
abrir ↗
Referência
CVE-2012-1259
CVE-2012-1259—
Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and pos
23RIESGO
abrir ↗
Referência
CVE-2012-1259
CVE-2012-1259—
Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and pos
23RIESGO
abrir ↗
Referência
CVE-2012-1260
CVE-2012-1260—
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Philips VOIP841 Firmware 1.0.4.800 - Multiple Vulnerabilities
CVE-2008-4876—remotehardware
Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firm
23RIESGO
abrir ↗
Referência
CVE-2012-1261
CVE-2012-1261—
Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebCards 1.3 - SQL Injection
CVE-2008-4877—webappsphp
SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is disabled, allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Maran PHP Shop - 'prod.php' SQL Injection
CVE-2008-4879—webappsphp
SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2012-1414
CVE-2012-1414—
Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attacke
23RIESGO
abrir ↗
Referência
CVE-2012-1416
CVE-2012-1416—
Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Maran PHP Shop - 'prodshow.php' SQL Injection
CVE-2008-4880—webappsphp
SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2012-1416
CVE-2012-1416—
Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authe
23RIESGO
abrir ↗
Referência
CVE-2012-1464
CVE-2012-1464—
Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via a
23RIESGO
abrir ↗
Referência
CVE-2012-1790
CVE-2012-1790—
Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a fu
23RIESGO
abrir ↗
Referência
CVE-2012-1790
CVE-2012-1790—
Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a fu
23RIESGO
abrir ↗
Referência
CVE-2012-1979
CVE-2012-1979—
Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticate
23RIESGO
abrir ↗
Referência
CVE-2012-1979
CVE-2012-1979—
Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticate
23RIESGO
abrir ↗
Referência
CVE-2012-2095
CVE-2012-2095—
The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configur
23RIESGO
abrir ↗
Referência
CVE-2026-59098
CVE-2026-59098HIGH
LobeChat 2.2.9 - Cross-User Document Disclosure via Unscoped RAG Semantic Search
41RIESGO
abrir ↗
Referência
CVE-2022-29464
CVE-2022-29464CRITICALbajo ataqueransomware
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Invision Power Board 2.0.3 - 'login.php' SQL Injection
CVE-2005-1598—webappsphp
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary
28RIESGO
abrir ↗
Referência
CVE-2012-2110
CVE-2012-2110—
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before
35RIESGO
abrir ↗
← anteriorpágina 510 / 748siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.