Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2017-16949
CVE-2017-16949—
An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper in
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' install Method
CVE-2008-0551—remotewindows
The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong N
28RIESGO
abrir ↗
Referência
CVE-2026-10694
CVE-2026-10694MEDIUM
SourceCodester Online Food Ordering System index.php include file inclusion
33RIESGO
abrir ↗
Referência
CVE-2014-9312
CVE-2014-9312—
Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.
50RIESGO
abrir ↗
Referência
CVE-2026-10163
CVE-2026-10163HIGH
Edimax BR-6478AC POST Request formUSBAccount buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-93314
CVE-2026-93314MEDIUM
Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow
33RIESGO
abrir ↗
Referência
CVE-2015-4118
CVE-2015-4118—
SQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows remote authenticated user
23RIESGO
abrir ↗
Referência
CVE-2018-6193
CVE-2018-6193—
A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph
23RIESGO
abrir ↗
Referência
CVE-2026-81847
CVE-2026-81847MEDIUM
MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-93313
CVE-2026-93313MEDIUM
Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
33RIESGO
abrir ↗
Referência✓ VexDay Proof
TIBCO Rendezvous 7.4.11 - Password Extractor
CVE-2006-4676—localwindows
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to
23RIESGO
abrir ↗
Referência
CVE-2020-11108
CVE-2020-11108—
The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abus
60RIESGO
abrir ↗
Referência
CVE-2020-11108
CVE-2020-11108—
The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abus
60RIESGO
abrir ↗
Referência
CVE-2026-81845
CVE-2026-81845MEDIUM
arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-81837
CVE-2026-81837MEDIUM
RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversal
33RIESGO
abrir ↗
Referência
CVE-2018-6583
CVE-2018-6583—
SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request.
28RIESGO
abrir ↗
Referência
CVE-2015-3864
CVE-2015-3864—
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in A
60RIESGO
abrir ↗
Referência
CVE-2020-11698
CVE-2020-11698—
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp
60RIESGO
abrir ↗
Referência
CVE-2026-81491
CVE-2026-81491MEDIUM
boxpositron with-context-mcp index.ts project_folder path traversal
33RIESGO
abrir ↗
Referência
CVE-2017-14847
CVE-2017-14847—
Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
The Classified Ad System 1.0 - 'main' SQL Injection
CVE-2006-6349—webappsasp
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2017-17577
CVE-2017-17577—
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param
23RIESGO
abrir ↗
Referência
CVE-2017-17577
CVE-2017-17577—
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param
23RIESGO
abrir ↗
Referência
CVE-2015-1479
CVE-2015-1479—
SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 buil
23RIESGO
abrir ↗
Referência
CVE-2015-1518
CVE-2015-1518—
SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remote
23RIESGO
abrir ↗
Referência
CVE-2018-6892
CVE-2018-6892—
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy
60RIESGO
abrir ↗
Referência
CVE-2026-80049
CVE-2026-80049HIGH
Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId
41RIESGO
abrir ↗
Referência
CVE-2026-79623
CVE-2026-79623MEDIUM
FishCodeTech Muteki Default Local Worker Backend settings.json os command injection
33RIESGO
abrir ↗
Referência
RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot)
CVE-2020-13259—webappshardware
A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauth
23RIESGO
abrir ↗
Referência
CVE-2015-1833
CVE-2015-1833—
XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.
35RIESGO
abrir ↗
← anteriorpágina 541 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.