Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência✓ VexDay Proof

BaoFeng2 - 'mps.dll' ActiveX Multiple Remote Buffer Overflows (PoC)

CVE-2007-4816—doswindows

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown imp

23RIESGO

abrir ↗

Referência

CVE-2002-1966

CVE-2002-1966—

Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read

23RIESGO

abrir ↗

Referência

CVE-2017-7310

CVE-2017-7310—

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9

50RIESGO

abrir ↗

Referência

CVE-2026-85015

CVE-2026-85015MEDIUM

Unlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal

33RIESGO

abrir ↗

Referência

CVE-2026-82680

CVE-2026-82680HIGH

D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write

41RIESGO

abrir ↗

Referência

CVE-2017-9730

CVE-2017-9730—

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência

CVE-2026-84430

CVE-2026-84430MEDIUM

gouguoa edit_personal Endpoint Index.php update dynamically-determined object attributes

33RIESGO

abrir ↗

Referência

Victor CMS 1.0 - 'user_firstname' Persistent Cross-Site Scripting

CVE-2020-15599—webappsphp

Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field.

23RIESGO

abrir ↗

Referência

CVE-2018-7658

CVE-2018-7658—

NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service

35RIESGO

abrir ↗

Referência✓ VexDay Proof

X-Cart - Multiple Remote File Inclusions

CVE-2007-4907—webappsphp

Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a

23RIESGO

abrir ↗

Referência

CVE-2017-7953

CVE-2017-7953—

INFOR EAM V11.0 Build 201410 has XSS via comment fields.

23RIESGO

abrir ↗

Referência

CVE-2017-7981

CVE-2017-7981—

Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project W

28RIESGO

abrir ↗

Referência

CVE-2026-82876

CVE-2026-82876CRITICAL

Phison PS3111-S11 Controller Firmware Signature Verification Bypass

48RIESGO

abrir ↗

Referência

CVE-2020-17506

CVE-2020-17506—

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator p

60RIESGO

abrir ↗

Referência

CVE-2018-15745

CVE-2018-15745—

Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F

60RIESGO

abrir ↗

Referência✓ VexDay Proof

WebSPELL 4.01.02 - 'picture.php' File Disclosure

CVE-2007-2369—webappsphp

Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before 4.3.0 is used, allows

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpMyNewsletter 0.8 (beta5) - Multiple Vulnerabilities

CVE-2007-2371—webappsphp

admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modification

23RIESGO

abrir ↗

Referência

CVE-2026-1403

CVE-2026-1403MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Xforum 1.4 - 'topic' SQL Injection

CVE-2008-0279—webappsphp

SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2026-84857

CVE-2026-84857MEDIUM

sigoden aichat API Endpoint serve.rs memory allocation

33RIESGO

abrir ↗

Referência

CVE-2026-84840

CVE-2026-84840MEDIUM

tsi-coop tsi-dpdp-cms Bootstrap Setup Endpoint InterceptingFilter.java missing authentication

33RIESGO

abrir ↗

Referência✓ VexDay Proof

DomPHP 0.81 - Remote Add Administrator

CVE-2008-0282—webappsphp

SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Foojan Wms 1.0 - 'story' SQL Injection

CVE-2008-0447—webappsphp

SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Easysitenetwork Recipe - 'categoryId' SQL Injection

CVE-2008-0453—webappsphp

SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência

CVE-2017-8464

CVE-2017-8464HIGHbajo ataque

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RIESGO

abrir ↗

Referência

Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting

CVE-2020-29477—webappsmultiple

Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allow

23RIESGO

abrir ↗

Referência

CVE-2020-29607

CVE-2020-29607—

A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access

35RIESGO

abrir ↗

Referência

CVE-2022-24734

CVE-2022-24734HIGH

Remote code execution in mybb

78RIESGO

abrir ↗

Referência✓ VexDay Proof

ACGVAnnu 1.3 - 'acgv.php?rubrik' Local File Inclusion

CVE-2007-2560—webappsphp

Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Wikivi5 - 'show.php?sous_rep' Remote File Inclusion

CVE-2007-2570—webappsphp

PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.