Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.813exploits catalogados
35.788CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.523 exploits
Referência
CVE-2023-30803
CVE-2023-30803CRITICAL
Sangfor Next-Gen Application Firewall Authentication Bypass
53RIESGO
abrir ↗
Referência
CVE-2018-15137
CVE-2018-15137—
CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml)
28RIESGO
abrir ↗
Referência
CVE-2017-2988
CVE-2017-2988—
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing g
28RIESGO
abrir ↗
Referência
CVE-2022-4120
CVE-2022-4120CRITICAL
Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection
53RIESGO
abrir ↗
Referência
CVE-2016-2207
CVE-2016-2207—
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS
28RIESGO
abrir ↗
Referência
CVE-2018-6546
CVE-2018-6546—
plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming
28RIESGO
abrir ↗
Referência✓ VexDay Proof
OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH (Ruby)
CVE-2008-0166—remotelinux
OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge
45RIESGO
abrir ↗
Referência
CVE-2009-2553
CVE-2009-2553—
Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magic_quotes_gpc is disab
23RIESGO
abrir ↗
Referência
CVE-2021-24274
CVE-2021-24274—
Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)
43RIESGO
abrir ↗
Referência
CVE-2015-2279
CVE-2015-2279—
cgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows
28RIESGO
abrir ↗
Referência
CVE-2015-2279
CVE-2015-2279—
cgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows
28RIESGO
abrir ↗
Referência
CVE-2016-4176
CVE-2016-4176—
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632
28RIESGO
abrir ↗
Referência
CVE-2022-4395
CVE-2022-4395CRITICAL
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
53RIESGO
abrir ↗
Referência
CVE-2008-0232
CVE-2008-0232—
Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência
CVE-2017-5404
CVE-2017-5404—
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and
28RIESGO
abrir ↗
Referência
CVE-2018-7669
CVE-2018-7669—
An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application
28RIESGO
abrir ↗
Referência
CVE-2016-3373
CVE-2016-3373—
The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S
28RIESGO
abrir ↗
Referência
CVE-2014-0749
CVE-2014-0749—
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Reso
28RIESGO
abrir ↗
Referência
PHP-Fusion 9.03.00 - 'Edit Profile' Remote Code Execution (Metasploit)
CVE-2019-12099—remotephp
In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dyn
28RIESGO
abrir ↗
Referência
CVE-2010-0757
CVE-2010-0757—
Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to exe
23RIESGO
abrir ↗
Referência
Wordpress Plugin - Membership For WooCommerce < v2.1.7 - Arbitrary File Upload to Shell (Unauthenticated)
CVE-2022-4395CRITICALwebappsphp
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
53RIESGO
abrir ↗
Referência
CVE-2024-20359
CVE-2024-20359MEDIUMbajo ataque
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been ava
68RIESGO
abrir ↗
Referência
CVE-2015-2280
CVE-2015-2280—
snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709
28RIESGO
abrir ↗
Referência
CVE-2015-2280
CVE-2015-2280—
snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709
28RIESGO
abrir ↗
Referência
CVE-2018-1247
CVE-2018-1247—
RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability
28RIESGO
abrir ↗
Referência
CVE-2017-1002008
CVE-2017-1002008—
Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membe
28RIESGO
abrir ↗
Referência
CVE-2010-1531
CVE-2010-1531—
Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to re
43RIESGO
abrir ↗
Referência
CVE-2010-1531
CVE-2010-1531—
Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to re
43RIESGO
abrir ↗
Referência
CVE-2013-2678
CVE-2013-2678—
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers
28RIESGO
abrir ↗
Referência
CVE-2013-2678
CVE-2013-2678—
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers
28RIESGO
abrir ↗
← anteriorpágina 544 / 751siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.