Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2006-1652

CVE-2006-1652—

Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-ass

50RIESGO

abrir ↗

Referência

CVE-2006-1652

CVE-2006-1652—

Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-ass

50RIESGO

abrir ↗

Referência✓ VexDay Proof

phpunity.postcard - 'gallery_path' Remote File Inclusion

CVE-2006-4869—webappsphp

PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2017-17604

CVE-2017-17604—

Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-108633

CVE-2026-108633MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add

33RIESGO

abrir ↗

Referência

CVE-2017-17613

CVE-2017-17613—

Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php cati

23RIESGO

abrir ↗

Referência

CVE-2026-108624

CVE-2026-108624MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via sysMessage deleteBatch Endpoint

33RIESGO

abrir ↗

Referência

CVE-2014-2023

CVE-2014-2023—

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allo

23RIESGO

abrir ↗

Referência

CVE-2022-50964

CVE-2022-50964MEDIUM

uBidAuction 2.0.1 myAuctions loose Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50964

CVE-2022-50964MEDIUM

uBidAuction 2.0.1 myAuctions loose Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50963

CVE-2022-50963MEDIUM

uBidAuction 2.0.1 myAuctions active Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50963

CVE-2022-50963MEDIUM

uBidAuction 2.0.1 myAuctions active Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50960

CVE-2022-50960MEDIUM

WordPress International Sms Contact Form 7 Integration 1.2 XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50959

CVE-2022-50959MEDIUM

WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php

33RIESGO

abrir ↗

Referência

CVE-2022-50958

CVE-2022-50958MEDIUM

WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php

33RIESGO

abrir ↗

Referência

CVE-2022-50957

CVE-2022-50957MEDIUM

Drupal avatar_uploader 7.x-1.0-beta8 Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50956

CVE-2022-50956MEDIUM

WordPress Plugin amministrazione-aperta 3.7.3 Local File Read

33RIESGO

abrir ↗

Referência

CVE-2022-50955

CVE-2022-50955MEDIUM

WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery

33RIESGO

abrir ↗

Referência

CVE-2022-50954

CVE-2022-50954MEDIUM

WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion

33RIESGO

abrir ↗

Referência

CVE-2022-50949

CVE-2022-50949MEDIUM

WordPress Plugin Videos sync PDF 1.7.4 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50948

CVE-2022-50948MEDIUM

Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting

33RIESGO

abrir ↗

Referência

CVE-2022-50947

CVE-2022-50947MEDIUM

WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50946

CVE-2022-50946MEDIUM

WordPress Plugin Netroics Blog Posts Grid 1.0 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50945

CVE-2022-50945MEDIUM

WordPress 3dady Real-Time Web Stats 1.0 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2015-7246

CVE-2015-7246—

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou

28RIESGO

abrir ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RIESGO

abrir ↗

Referência

CVE-2017-17628

CVE-2017-17628—

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.

23RIESGO

abrir ↗

Referência

CVE-2022-50943

CVE-2022-50943MEDIUM

Moodle LMS 4.0 Cross-Site Scripting via course search.php

33RIESGO

abrir ↗

Referência

CVE-2026-8244

CVE-2026-8244MEDIUM

Industrial Application Software IAS Canias ERP Login RMI improper authentication

33RIESGO

abrir ↗

Referência

CVE-2026-8242

CVE-2026-8242MEDIUM

Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.