Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.900exploits catalogados
35.840CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.600 exploits
Referência
CVE-2010-3144
CVE-2010-3144—
Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Ser
28RIESGO
abrir ↗
Referência
CVE-2017-6367
CVE-2017-6367—
In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology invo
23RIESGO
abrir ↗
Referência
CVE-2010-1876
CVE-2010-1876—
SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2012-2277
CVE-2012-2277—
The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote
23RIESGO
abrir ↗
Referência
CVE-2021-30044
CVE-2021-30044—
Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php.
23RIESGO
abrir ↗
Referência
CVE-2010-1876
CVE-2010-1876—
SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2017-9602
CVE-2017-9602—
KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-man
23RIESGO
abrir ↗
Referência
CVE-2012-5876
CVE-2012-5876—
Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to c
23RIESGO
abrir ↗
Referência
CVE-2016-5740
CVE-2016-5740—
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical atta
23RIESGO
abrir ↗
Referência
CVE-2011-4558
CVE-2011-4558—
Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and re
23RIESGO
abrir ↗
Referência
CVE-2017-8684
CVE-2017-8684—
Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R
23RIESGO
abrir ↗
Referência
CVE-2017-17110
CVE-2017-17110—
Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request.
23RIESGO
abrir ↗
Referência
CVE-2018-8411
CVE-2018-8411—
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vuln
23RIESGO
abrir ↗
Referência
CVE-2009-2890
CVE-2009-2890—
Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arb
23RIESGO
abrir ↗
Referência
CVE-2018-7701
CVE-2018-7701—
Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Hot Links SQL-PHP 3 - 'report.php' Multiple Vulnerabilities
CVE-2008-4378—webappsphp
SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Import Tools Mod 0.1.4 - Remote File Inclusion
CVE-2006-7147—webappsphp
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Chicken of the VNC 2.0 - 'NULL-pointer' Remote Denial of Service
CVE-2007-0756—dososx
Chicken of the VNC (cotv) 2.0 allows remote attackers to cause a denial of service (application crash) via a large compu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Flat Chat 2.0 - 'include online.txt' Remote Code Execution
CVE-2007-1394—webappsphp
Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
STPHPLibrary - 'STPHPLIB_DIR' Remote File Inclusion
CVE-2007-4737—webappsphp
Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CenterIM 4.22.3 - Remote Command Execution
CVE-2008-1467—remotelinux
CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters
23RIESGO
abrir ↗
Referência
CVE-2008-4378
CVE-2008-4378—
SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to ex
23RIESGO
abrir ↗
Referência
CVE-2026-65917
CVE-2026-65917HIGH
CyberPanel IncBackups IDOR via Sequential Backup ID
41RIESGO
abrir ↗
Referência
CVE-2010-3212
CVE-2010-3212—
SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2026-9577
CVE-2026-9577MEDIUM
Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-8986
CVE-2026-8986CRITICAL
Command Injection via Malicious OCPP Server
48RIESGO
abrir ↗
Referência
CVE-2026-8985
CVE-2026-8985CRITICAL
Unauthenticated Command Injection
48RIESGO
abrir ↗
Referência
CVE-2026-8984
CVE-2026-8984CRITICAL
Unauthenticated RCE
48RIESGO
abrir ↗
Referência
CVE-2026-8983
CVE-2026-8983CRITICAL
Backdoor Authentication Token
48RIESGO
abrir ↗
Referência
CVE-2026-16334
CVE-2026-16334MEDIUM
itsourcecode Hospital Management System prescriptionorder.php sql injection
33RIESGO
abrir ↗
← anteriorpágina 598 / 754siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.