Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2015-3864

CVE-2015-3864—

Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in A

60RIESGO

abrir ↗

Referência

CVE-2020-11698

CVE-2020-11698—

An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp

60RIESGO

abrir ↗

Referência

CVE-2026-81491

CVE-2026-81491MEDIUM

boxpositron with-context-mcp index.ts project_folder path traversal

33RIESGO

abrir ↗

Referência

CVE-2017-14847

CVE-2017-14847—

Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

The Classified Ad System 1.0 - 'main' SQL Injection

CVE-2006-6349—webappsasp

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute ar

23RIESGO

abrir ↗

Referência

CVE-2017-17577

CVE-2017-17577—

FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param

23RIESGO

abrir ↗

Referência

CVE-2017-17577

CVE-2017-17577—

FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param

23RIESGO

abrir ↗

Referência

CVE-2015-1479

CVE-2015-1479—

SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 buil

23RIESGO

abrir ↗

Referência

CVE-2015-1518

CVE-2015-1518—

SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remote

23RIESGO

abrir ↗

Referência

CVE-2018-6892

CVE-2018-6892—

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy

60RIESGO

abrir ↗

Referência

CVE-2015-4414

CVE-2015-4414—

Directory traversal vulnerability in download_audio.php in the SE HTML5 Album Audio Player (se-html5-album-audio-player)

43RIESGO

abrir ↗

Referência

CVE-2026-72711 — Lean 4 Kernel Soundness Bug: Inference Cache Poisoning

CVE-2026-72711MEDIUM

Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration With an Unbound Free Variable

33RIESGO

abrir ↗

Referência

CVE-2017-15276

CVE-2017-15276—

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design ga

23RIESGO

abrir ↗

Referência

CVE-2026-9346

CVE-2026-9346HIGH

Edimax EW-7438RPn webs formWirelessTbl buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-76789

CVE-2026-76789HIGH

Slider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers

41RIESGO

abrir ↗

Referência

CVE-2026-9345

CVE-2026-9345HIGH

Edimax EW-7438RPn webs formWizSurvey buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-78143

CVE-2026-78143MEDIUM

code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-19222

CVE-2026-19222MEDIUM

Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass

33RIESGO

abrir ↗

Referência

CVE-2026-9344

CVE-2026-9344HIGH

Edimax EW-7438RPn webs formWpsStart stack-based overflow

41RIESGO

abrir ↗

Referência✓ VexDay Proof

D2-Shoutbox 4.2 IPB Mod - 'load' SQL Injection

CVE-2006-1153—webappsphp

SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load pa

23RIESGO

abrir ↗

Referência

CVE-2014-0160

CVE-2014-0160HIGHbajo ataque

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

abrir ↗

Referência

CVE-2026-78142

CVE-2026-78142MEDIUM

code-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization

33RIESGO

abrir ↗

Referência

CVE-2026-76793

CVE-2026-76793HIGH

Firebase Authentication < 1.7.1 - Unauthenticated Account Takeover via Firebase Email Claim

41RIESGO

abrir ↗

Referência

CVE-2015-2102

CVE-2015-2102—

SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows remote attackers to execut

23RIESGO

abrir ↗

Referência

CVE-2017-15987

CVE-2017-15987—

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-15988

CVE-2017-15988—

Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008

23RIESGO

abrir ↗

Referência

CVE-2015-2153

CVE-2015-2153—

The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers t

28RIESGO

abrir ↗

Referência

CVE-2026-9343

CVE-2026-9343MEDIUM

Edimax EW-7438RPn webs formWpsStart os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-9342

CVE-2026-9342MEDIUM

SourceCodester Hospitals Patient Records Management System view_history.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2018-25357

CVE-2018-25357CRITICAL

Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php

48RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.