Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.772exploits catalogados

35.760CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8710Nuclei 4319Metasploit 3476✓ solo verificadosrecientes populares riesgo

22.523 exploits

Referência

CVE-2017-7185

CVE-2017-7185—

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embed

28RIESGO

abrir ↗

Referência

CVE-2015-1375

CVE-2015-1375—

pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload

28RIESGO

abrir ↗

Referência

CVE-2019-17554

CVE-2019-17554—

The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resoluti

28RIESGO

abrir ↗

Referência

CVE-2009-4749

CVE-2009-4749—

Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência

CVE-2014-8673

CVE-2014-8673—

Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in

28RIESGO

abrir ↗

Referência

CVE-2014-8673

CVE-2014-8673—

Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in

28RIESGO

abrir ↗

Referência

CVE-2017-15118

CVE-2017-15118HIGH

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client

46RIESGO

abrir ↗

Referência

CVE-2010-3595

CVE-2010-3595—

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 all

28RIESGO

abrir ↗

Referência

CVE-2015-7039

CVE-2015-7039—

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows rem

28RIESGO

abrir ↗

Referência

CVE-2021-33990

CVE-2021-33990CRITICAL

Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The

53RIESGO

abrir ↗

Referência

CVE-2011-1525

CVE-2011-1525—

Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and R

28RIESGO

abrir ↗

Referência

CVE-2010-1597

CVE-2010-1597—

Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbit

28RIESGO

abrir ↗

Referência

CVE-2020-28687

CVE-2020-28687—

The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upl

28RIESGO

abrir ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RIESGO

abrir ↗

Referência

CVE-2013-5758

CVE-2013-5758—

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by

28RIESGO

abrir ↗

Referência

CVE-2010-1925

CVE-2010-1925—

SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Word 2007 - Multiple Vulnerabilities

CVE-2007-1911—doswindows

Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU con

28RIESGO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component - Denial of Service

CVE-2007-3169—doswindows

Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Ynews 1.0.0 - 'id' SQL Injection

CVE-2008-0653—webappsphp

SQL injection vulnerability in index.php in the Ynews (com_ynews) 1.0.0 component for Joomla! allows remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2017-17739

CVE-2017-17739—

The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html

28RIESGO

abrir ↗

Referência

WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) - Authenticated RCE

CVE-2023-27826HIGHremotehardware

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Inj

46RIESGO

abrir ↗

Referência

CVE-2010-1981

CVE-2010-1981—

Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read a

43RIESGO

abrir ↗

Referência

CVE-2010-1981

CVE-2010-1981—

Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read a

43RIESGO

abrir ↗

Referência

CVE-2023-0159

CVE-2023-0159—

Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE

50RIESGO

abrir ↗

Referência

CVE-2013-10069

CVE-2013-10069CRITICAL

D-Link Devices Unauthenticated RCE

68RIESGO

abrir ↗

Referência

CVE-2013-10069

CVE-2013-10069CRITICAL

D-Link Devices Unauthenticated RCE

68RIESGO

abrir ↗

Referência

CVE-2013-10069

CVE-2013-10069CRITICAL

D-Link Devices Unauthenticated RCE

68RIESGO

abrir ↗

Referência✓ VexDay Proof

EgyPlus 7ml 1.0.1 - Authentication Bypass

CVE-2009-2168CRITICALwebappsphp

cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit whe

53RIESGO

abrir ↗

Referência

CVE-2020-3118

CVE-2020-3118HIGHbajo ataque

Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

76RIESGO

abrir ↗

Referência

CVE-2015-6912

CVE-2015-6912—

Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharact

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.