Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
GreenShot 1.2.10 - Insecure Deserialization Arbitrary Code Execution
CVE-2023-34634—localwindows
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .green
38RIESGO
abrir ↗
Referência✓ VexDay Proof
News Rover 12.1 Rev 1 - Stack Overflow (1)
CVE-2007-1041—localwindows
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2026-18859
CVE-2026-18859MEDIUM
ESAFENET CDG usbkey;logindojojs sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-101015
CVE-2026-101015MEDIUM
Trusted Domain Project OpenDMARC policy.c improper validation of unsafe equivalence in input
33RIESGO
abrir ↗
Referência
CVE-2026-70620
CVE-2026-70620MEDIUM
Odysseus SSRF via Embedding Endpoint Configuration
33RIESGO
abrir ↗
Referência
CVE-2017-6190
CVE-2017-6190—
Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows
28RIESGO
abrir ↗
Referência
CVE-2017-6361
CVE-2017-6361—
QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.
35RIESGO
abrir ↗
Referência
CVE-2026-15248
CVE-2026-15248MEDIUM
Meta Box < 5.13.1 - Contributor+ Arbitrary Attachment Deletion via IDOR
33RIESGO
abrir ↗
Referência
CVE-2018-7448
CVE-2018-7448—
Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote
28RIESGO
abrir ↗
Referência
CVE-2026-105775
CVE-2026-105775MEDIUM
vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-105708
CVE-2026-105708MEDIUM
imgproxy SVG svg.go sanitizeElement cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-105707
CVE-2026-105707MEDIUM
uptrace user_handler.go Login information exposure
33RIESGO
abrir ↗
Referência
CVE-2018-7581
CVE-2018-7581—
\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions (BUIL
23RIESGO
abrir ↗
Referência
CVE-2018-7584
CVE-2018-7584—
In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer
45RIESGO
abrir ↗
Referência
CVE-2018-7600
CVE-2018-7600CRITICALbajo ataqueransomware
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Foxit Reader 9.7.1 - Remote Command Execution (Javascript API)
CVE-2020-14425—localwindows
Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can exe
35RIESGO
abrir ↗
Referência
CVE-2020-1472
CVE-2020-1472MEDIUMbajo ataqueransomware
Netlogon Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke Module splattforum 4.0 RC1 - Local File Inclusion
CVE-2007-1633—webappsphp
Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allo
23RIESGO
abrir ↗
Referência
CVE-2026-105315
CVE-2026-105315MEDIUM
django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
ClassWeb 2.0.3 - 'BASE' Remote File Inclusion
CVE-2007-1640—webappsphp
Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpRealty 0.02 - 'MGR' Multiple Remote File Inclusions
CVE-2007-4834—webappsphp
Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP cod
35RIESGO
abrir ↗
Referência
CVE-2017-7411
CVE-2017-7411—
An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentEl
50RIESGO
abrir ↗
Referência
CVE-2017-7411
CVE-2017-7411—
An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentEl
50RIESGO
abrir ↗
Referência
CVE-2017-7457
CVE-2017-7457—
XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure.
23RIESGO
abrir ↗
Referência
CVE-2020-16040
CVE-2020-16040—
Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially explo
60RIESGO
abrir ↗
Referência✓ VexDay Proof
Valdersoft Shopping Cart 3.0 - Multiple Remote File Inclusions
CVE-2006-6691—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Valdersoft Shopping Cart 3.0 and earlier allow remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2020-17456
CVE-2020-17456—
SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi pa
60RIESGO
abrir ↗
Referência
CVE-2026-82214
CVE-2026-82214MEDIUM
Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS Download
33RIESGO
abrir ↗
Referência
CVE-2026-118638
CVE-2026-118638HIGH
Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route
41RIESGO
abrir ↗
Referência
CVE-2026-82526
CVE-2026-82526CRITICAL
R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint
48RIESGO
abrir ↗
← anteriorpágina 567 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.