Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.900exploits catalogados
35.840CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.600 exploits
Referência✓ VexDay Proof
Mambo Component SMF Forum 1.3.1.3 - Remote File Inclusion
CVE-2006-3773—webappsphp
PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component (com_smf) For Joomla! and M
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Myspace Clone Script - 'index.php' Remote File Inclusion
CVE-2007-6057—webappsphp
PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) all
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TUTOS 1.3 - 'cmd.php' Remote Command Execution
CVE-2008-0148—webappsphp
TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell comman
23RIESGO
abrir ↗
Referência✓ VexDay Proof
asg-sentry 7.0.0 - Multiple Vulnerabilities
CVE-2008-1320—dosmultiple
Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary co
28RIESGO
abrir ↗
Referência
CVE-2018-19751
CVE-2018-19751—
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.
38RIESGO
abrir ↗
Referência
CVE-2010-0985
CVE-2010-0985—
Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote atta
43RIESGO
abrir ↗
Referência
CVE-2012-5340
CVE-2012-5340—
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corru
23RIESGO
abrir ↗
Referência
CVE-2025-7206
CVE-2025-7206CRITICAL
D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow
53RIESGO
abrir ↗
Referência
CVE-2017-15580
CVE-2017-15580—
osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly v
28RIESGO
abrir ↗
Referência
CVE-2010-1601
CVE-2010-1601—
Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to rea
43RIESGO
abrir ↗
Referência
CVE-2010-1601
CVE-2010-1601—
Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to rea
43RIESGO
abrir ↗
Referência
CVE-2013-1468
CVE-2013-1468—
Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote att
23RIESGO
abrir ↗
Referência
CVE-2021-24245
CVE-2021-24245—
Stop Spammers < 2021.9 - Reflected Cross-Site Scripting (XSS)
38RIESGO
abrir ↗
Referência
CVE-2019-25713
CVE-2019-25713HIGH
MyT-PM 1.5.1 SQL Injection via Charge[group_total] Parameter
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Gateway Weblaunch - ActiveX Control Insecure Method
CVE-2008-0221—remotewindows
Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Chilkat Socket ActiveX 2.3.1.1 - Arbitrary File Creation
CVE-2008-6959—remotewindows
Insecure method vulnerability in the Chilkat Socket ActiveX control (ChilkatSocket.ChilkatSocket.1) in ChilkatSocket.dll
23RIESGO
abrir ↗
Referência
CVE-2026-4585
CVE-2026-4585CRITICAL
Tiandy Easy7 Integrated Management Platform Configuration ImportSystemConfiguration.jsp os command injection
48RIESGO
abrir ↗
Referência
CVE-2010-1044
CVE-2010-1044—
SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2012-2210
CVE-2012-2210—
The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device cras
23RIESGO
abrir ↗
Referência
CVE-2018-17441
CVE-2018-17441—
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser
23RIESGO
abrir ↗
Referência
CVE-2021-24862
CVE-2021-24862—
RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection
60RIESGO
abrir ↗
Referência
CVE-2018-17443
CVE-2018-17443—
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the UpdateS
23RIESGO
abrir ↗
Referência
CVE-2014-0980
CVE-2014-0980—
Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI f
50RIESGO
abrir ↗
Referência
CVE-2017-14085
CVE-2017-14085—
Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can acc
23RIESGO
abrir ↗
Referência
CVE-2017-14085
CVE-2017-14085—
Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can acc
23RIESGO
abrir ↗
Referência
CVE-2026-28517
CVE-2026-28517CRITICAL
openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter
63RIESGO
abrir ↗
Referência
CVE-2026-28517
CVE-2026-28517CRITICAL
openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter
63RIESGO
abrir ↗
Referência
CVE-2008-4157
CVE-2008-4157—
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2008-4157
CVE-2008-4157—
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2017-6095
CVE-2017-6095—
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/list
23RIESGO
abrir ↗
← anteriorpágina 596 / 754siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.