Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-82694
CVE-2026-82694CRITICAL
Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication
48RIESGO
abrir ↗
Referência
CVE-2009-3719
CVE-2009-3719—
Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2026-112147
CVE-2026-112147MEDIUM
ai-genius-automations octoally index.ts information disclosure
33RIESGO
abrir ↗
Referência
CVE-2010-2257
CVE-2010-2257—
SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPAuctionSystem - Cross-Site Scripting / SQL Injection
CVE-2009-0107—webappsphp
Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2011-10010
CVE-2011-10010CRITICAL
QuickShare File Server 1.2.1 Path Traversal RCE
63RIESGO
abrir ↗
Referência
CVE-2011-10010
CVE-2011-10010CRITICAL
QuickShare File Server 1.2.1 Path Traversal RCE
63RIESGO
abrir ↗
Referência
CVE-2011-10010
CVE-2011-10010CRITICAL
QuickShare File Server 1.2.1 Path Traversal RCE
63RIESGO
abrir ↗
Referência
CVE-2011-10010
CVE-2011-10010CRITICAL
QuickShare File Server 1.2.1 Path Traversal RCE
63RIESGO
abrir ↗
Referência
CVE-2015-7714
CVE-2015-7714—
Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote adm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Online Grades 3.2.4 - Authentication Bypass
CVE-2009-0452—webappsphp
Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, a
23RIESGO
abrir ↗
Referência
CVE-2009-3202
CVE-2009-3202—
Cross-site scripting (XSS) vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote attackers to inject arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
sourdough 0.3.5 - Remote File Inclusion
CVE-2009-0456—webappsphp
PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough
23RIESGO
abrir ↗
Referência
CVE-2009-3562
CVE-2009-3562—
Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗
Referência
CVE-2017-17581
CVE-2017-17581—
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
23RIESGO
abrir ↗
Referência
CVE-2023-23059
CVE-2023-23059CRITICAL
An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions
48RIESGO
abrir ↗
Referência
CVE-2009-4523
CVE-2009-4523—
Cross-site scripting (XSS) vulnerability in index.php in Zainu 1.0 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Referência
CVE-2009-4681
CVE-2009-4681—
Cross-site scripting (XSS) vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbit
23RIESGO
abrir ↗
Referência
CVE-2010-1982
CVE-2010-1982—
Directory traversal vulnerability in the JA Voice (com_javoice) component 2.0 for Joomla! allows remote attackers to rea
38RIESGO
abrir ↗
Referência
CVE-2010-2307
CVE-2010-2307—
Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmw
38RIESGO
abrir ↗
Referência
CVE-2017-17582
CVE-2017-17582—
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
23RIESGO
abrir ↗
Referência
CVE-2010-1999
CVE-2010-1999—
Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when register_globals is enabled
23RIESGO
abrir ↗
Referência
CVE-2017-17582
CVE-2017-17582—
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-32985
CVE-2026-32985CRITICAL
Xerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code Execution
63RIESGO
abrir ↗
Referência
CVE-2022-25630
CVE-2022-25630MEDIUM
An authenticated user can embed malicious content with XSS into the admin group policy page.
33RIESGO
abrir ↗
Referência
CVE-2026-19454
CVE-2026-19454MEDIUM
JetBackup 3.1.18.8 - 3.1.23.3 - Admin+ Multisite Network Backup Download
33RIESGO
abrir ↗
Referência
CVE-2017-17586
CVE-2017-17586—
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Rankem - File Disclosure / Cross-Site Scripting / Cookie
CVE-2009-0248—webappsphp
Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrar
23RIESGO
abrir ↗
Referência
CVE-2026-110069
CVE-2026-110069MEDIUM
Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions
33RIESGO
abrir ↗
Referência
CVE-2026-81835
CVE-2026-81835MEDIUM
RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injection
33RIESGO
abrir ↗
← anteriorpágina 581 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.