Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.167exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.079VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2010-0724

CVE-2010-0724—

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2010-3419

CVE-2010-3419—

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote atta

23RIESGO

abrir ↗

Referência

CVE-2010-3426

CVE-2010-3426—

Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remo

43RIESGO

abrir ↗

Referência

CVE-2010-4809

CVE-2010-4809—

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RIESGO

abrir ↗

Referência

CVE-2010-5001

CVE-2010-5001—

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2010-5017

CVE-2010-5017—

SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Link Trader - 'lnkid' SQL Injection

CVE-2008-6102—webappsphp

SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência✓ VexDay Proof

unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities

CVE-2009-1948—webappsphp

Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals i

23RIESGO

abrir ↗

Referência

CVE-2009-2715

CVE-2009-2715—

Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a

23RIESGO

abrir ↗

Referência

CVE-2010-3426

CVE-2010-3426—

Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remo

43RIESGO

abrir ↗

Referência

CVE-2010-5020

CVE-2010-5020—

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência

CVE-2023-39147

CVE-2023-39147—

An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafte

23RIESGO

abrir ↗

Referência

CVE-2026-115255

CVE-2026-115255MEDIUM

WP Roster < 2.35 - Unauthenticated Roster Member Deletion

33RIESGO

abrir ↗

Referência

CVE-2026-65699

CVE-2026-65699LOW

AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation

28RIESGO

abrir ↗

Referência

CVE-2026-115225

CVE-2026-115225MEDIUM

Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups Lookup

33RIESGO

abrir ↗

Referência

CVE-2012-4746

CVE-2012-4746—

Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote atta

23RIESGO

abrir ↗

Referência

CVE-2017-13867

CVE-2017-13867—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RIESGO

abrir ↗

Referência

CVE-2024-6164

CVE-2024-6164CRITICAL

Filter & Grids < 2.8.33 - Unauthenticated LFI

48RIESGO

abrir ↗

Referência

CVE-2020-36897

CVE-2020-36897CRITICAL

QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Execution

48RIESGO

abrir ↗

Referência

CVE-2013-0292

CVE-2013-0292—

The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender

23RIESGO

abrir ↗

Referência

CVE-2026-16735

CVE-2026-16735MEDIUM

release-it conventional-changelog Changelog File index.js writeChangelog os command injection

33RIESGO

abrir ↗

Referência

CVE-2024-52544

CVE-2024-52544CRITICAL

Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow

48RIESGO

abrir ↗

Referência✓ VexDay Proof

iyzi Forum 1.0 Beta 3 - SQL Injection

CVE-2006-5054—webappsasp

SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2010-4838

CVE-2010-4838—

SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users

23RIESGO

abrir ↗

Referência

CVE-2011-4569

CVE-2011-4569—

SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2012-4425

CVE-2012-4425—

libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to

23RIESGO

abrir ↗

Referência

CVE-2017-6366

CVE-2017-6366—

Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 all

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ZZ FlashChat 3.1 - 'help.php' Local File Inclusion

CVE-2007-5620—webappsphp

Directory traversal vulnerability in admin/inc/help.php in ZZ:FlashChat 3.1 and earlier allows remote attackers to inclu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ezcms 1.2 - Blind SQL Injection / Authentication Bypass

CVE-2008-2921—webappsphp

SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Ovidentia 6.6.5 - 'item' SQL Injection

CVE-2008-4423—webappsphp

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.