Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.866exploits catalogados
35.812CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.549 exploits
Referência
CVE-2009-3643
CVE-2009-3643—
Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to th
23RIESGO
abrir ↗
Referência
CVE-2009-3644
CVE-2009-3644—
SQL injection vulnerability in the Soundset (com_soundset) component 1.0 for Joomla! allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2021-26855
CVE-2021-26855CRITICALbajo ataqueransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Referência
CVE-2021-26855
CVE-2021-26855CRITICALbajo ataqueransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Referência
CVE-2018-8550
CVE-2018-8550—
An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerabili
23RIESGO
abrir ↗
Referência
CVE-2010-1092
CVE-2010-1092—
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Blog:CMS 4.1.3 - 'NP_UserSharing.php' Remote File Inclusion
CVE-2006-6552—webappsphp
PHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote
23RIESGO
abrir ↗
Referência
CVE-2017-18001
CVE-2017-18001—
Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the de
28RIESGO
abrir ↗
Referência
CVE-2024-6928
CVE-2024-6928CRITICAL
Opti Marketing <= 2.0.9 - Unauthenticated SQLi
63RIESGO
abrir ↗
Referência
CVE-2024-6924
CVE-2024-6924CRITICAL
TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi
63RIESGO
abrir ↗
Referência
CVE-2024-6926
CVE-2024-6926CRITICAL
Viral Signup <= 2.1 - Unauthenticated SQLi
63RIESGO
abrir ↗
Referência
CVE-2023-7095
CVE-2023-7095CRITICAL
Totolink A7100RU HTTP POST Request main buffer overflow
53RIESGO
abrir ↗
Referência
CVE-2017-7783
CVE-2017-7783—
If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example
28RIESGO
abrir ↗
Referência
CVE-2017-16353
CVE-2017-16353—
GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function
28RIESGO
abrir ↗
Referência
CVE-2009-3667
CVE-2009-3667—
SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Jupiter CMS 1.1.5 - '/index.php' Local/Remote File Inclusion
CVE-2007-0986—webappsphp
PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remot
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AMX Corp. VNC ActiveX Control - 'AmxVnc.dll 1.0.13.0' Remote Buffer Overflow
CVE-2007-3536—remotewindows
Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers
28RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPress 0.2.0 - 'adisplay.php?lang' Local File Inclusion
CVE-2007-4524—webappsphp
PHP remote file inclusion vulnerability in adisplay.php in PhPress 0.2.0 allows remote attackers to execute arbitrary PH
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CitectSCADA ODBC Server - Remote Stack Buffer Overflow (Metasploit)
CVE-2008-2639—remotewindows
Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows rem
60RIESGO
abrir ↗
Referência
CVE-2021-25155
CVE-2021-25155—
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v
28RIESGO
abrir ↗
Referência
CVE-2017-1000364
CVE-2017-1000364—
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficie
38RIESGO
abrir ↗
Referência
CVE-2019-16223
CVE-2019-16223—
WordPress before 5.2.3 allows XSS in post previews by authenticated users.
23RIESGO
abrir ↗
Referência
CVE-2014-1785
CVE-2014-1785—
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
35RIESGO
abrir ↗
Referência
CVE-2023-4112
CVE-2023-4112MEDIUM
PHP Jabbers Shuttle Booking Software index.php cross site scripting
48RIESGO
abrir ↗
Referência
CVE-2018-12981
CVE-2018-12981—
An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerabilit
23RIESGO
abrir ↗
Referência
CVE-2017-6098
CVE-2017-6098—
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/camp
23RIESGO
abrir ↗
Referência
CVE-2009-3709
CVE-2009-3709—
Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-a
23RIESGO
abrir ↗
Referência
CVE-2014-1785
CVE-2014-1785—
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
35RIESGO
abrir ↗
Referência
CVE-2009-2361
CVE-2009-2361—
SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2018-16517
CVE-2018-16517—
asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a deni
23RIESGO
abrir ↗
← anteriorpágina 575 / 752siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.