Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.813exploits catalogados
35.788CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.523 exploits
Referência
CVE-2010-0765
CVE-2010-0765—
fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2017-3730
CVE-2017-3730—
Bad (EC)DHE parameters cause a client crash
35RIESGO
abrir ↗
Referência
CVE-2019-25224
CVE-2019-25224CRITICAL
WP Database Backup < 5.2 - Unauthenticated OS Command Injection
68RIESGO
abrir ↗
Referência
CVE-2018-15140
CVE-2018-15140—
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authent
28RIESGO
abrir ↗
Referência
CVE-2018-13784
CVE-2018-13784—
PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfi
28RIESGO
abrir ↗
Referência
CVE-2018-13784
CVE-2018-13784—
PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfi
28RIESGO
abrir ↗
Referência
CVE-2012-4412
CVE-2012-4412—
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-depende
28RIESGO
abrir ↗
Referência
CVE-2009-4615
CVE-2009-4615—
SQL injection vulnerability in review.php in MYRE Holiday Rental Manager allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2020-15492
CVE-2020-15492—
An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe we
28RIESGO
abrir ↗
Referência
CVE-2017-6315
CVE-2017-6315—
Astaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx
28RIESGO
abrir ↗
Referência
CVE-2016-1713
CVE-2016-1713—
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger
43RIESGO
abrir ↗
Referência
CVE-2010-0951
CVE-2010-0951—
SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Agares phpAutoVideo 2.21 - 'articlecat' SQL Injection (1)
CVE-2008-0262—webappsphp
SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2017-6971
CVE-2017-6971—
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary comma
28RIESGO
abrir ↗
Referência
RPi-Jukebox-RFID 2.8.0 - Remote Command Execution
CVE-2025-10327MEDIUMwebappsmultiple
MiczFlor RPi-Jukebox-RFID shuffle.php os command injection
38RIESGO
abrir ↗
Referência
CVE-2025-10370
CVE-2025-10370MEDIUM
MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2010-1953
CVE-2010-1953—
Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote a
43RIESGO
abrir ↗
Referência
CVE-2010-4335
CVE-2010-4335—
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows re
50RIESGO
abrir ↗
Referência
CVE-2013-1603
CVE-2013-1603—
An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DC
28RIESGO
abrir ↗
Referência
CVE-2018-1041
CVE-2018-1041—
A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an e
28RIESGO
abrir ↗
Referência
CVE-2010-4335
CVE-2010-4335—
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows re
50RIESGO
abrir ↗
Referência
CVE-2010-1929
CVE-2010-1929—
Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll
28RIESGO
abrir ↗
Referência
CVE-2013-7137
CVE-2013-7137—
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and
28RIESGO
abrir ↗
Referência
CVE-2010-0973
CVE-2010-0973—
SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2022-31125
CVE-2022-31125CRITICAL
Authentication Bypass in Roxy-wi
53RIESGO
abrir ↗
Referência
CVE-2020-23935
CVE-2020-23935—
Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (
28RIESGO
abrir ↗
Referência
CVE-2009-4660
CVE-2009-4660—
Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to
50RIESGO
abrir ↗
Referência
CVE-2020-8639
CVE-2020-8639—
An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute ar
28RIESGO
abrir ↗
Referência
CVE-2018-1042
CVE-2018-1042—
Moodle 3.x has Server Side Request Forgery in the filepicker.
28RIESGO
abrir ↗
Referência
CVE-2025-2775
CVE-2025-2775CRITICALbajo ataque
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
100RIESGO
abrir ↗
← anteriorpágina 545 / 751siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.