Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2020-8416

CVE-2020-8416—

IKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to th

28RIESGO

abrir ↗

Referência

CVE-2023-0902

CVE-2023-0902LOW

SourceCodester Simple Food Ordering System process_order.php cross site scripting

28RIESGO

abrir ↗

Referência

CVE-2010-1270

CVE-2010-1270—

SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2026-90847

CVE-2026-90847CRITICAL

EFM ipTIME C200E System Setup iux_set.cgi os command injection

48RIESGO

abrir ↗

Referência

CVE-2022-3792

CVE-2022-3792CRITICAL

SQL Injection in GullsEye Terminal Operating System

53RIESGO

abrir ↗

Referência

CVE-2022-3792

CVE-2022-3792CRITICAL

SQL Injection in GullsEye Terminal Operating System

53RIESGO

abrir ↗

Referência

CVE-2026-90846

CVE-2026-90846MEDIUM

PHPGurukul Daily Expense Tracker System forgot-password.php sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component 5.2 - ActiveX Remote Buffer Overflow (PoC)

CVE-2007-4821—doswindows

Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows r

23RIESGO

abrir ↗

Referência

CVE-2026-90812

CVE-2026-90812MEDIUM

cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment

33RIESGO

abrir ↗

Referência

CVE-2014-4170

CVE-2014-4170—

A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restric

28RIESGO

abrir ↗

Referência

CVE-2015-7944

CVE-2015-7944—

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Sisfo Kampus 2006 - 'blanko.preview.php' Local File Disclosure

CVE-2007-4820—webappsphp

Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Auto Listings - 'pg' SQL Injection

CVE-2008-6226—webappsphp

SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled,

23RIESGO

abrir ↗

Referência

CVE-2019-1347

CVE-2019-1347—

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi

28RIESGO

abrir ↗

Referência✓ VexDay Proof

phpBB Spider Friendly Module 1.3.10 - Remote File Inclusion

CVE-2006-5665—webappsphp

PHP remote file inclusion vulnerability in admin/modules_data.php in the phpBB module Spider Friendly 1.3.10 and earlier

23RIESGO

abrir ↗

Referência

CVE-2011-4107

CVE-2011-4107—

The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7

28RIESGO

abrir ↗

Referência

CVE-2011-4875

CVE-2011-4875—

Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC

28RIESGO

abrir ↗

Referência

CVE-2010-1308

CVE-2010-1308—

Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read a

43RIESGO

abrir ↗

Referência

CVE-2010-2351

CVE-2010-2351—

Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remo

28RIESGO

abrir ↗

Referência

CVE-2023-0913

CVE-2023-0913MEDIUM

SourceCodester Auto Dealer Management System sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-90700

CVE-2026-90700MEDIUM

itsourcecode Sales and Inventory System pro_edit1.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2010-0467

CVE-2010-0467—

Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attac

50RIESGO

abrir ↗

Referência

CVE-2010-2356

CVE-2010-2356—

Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject

23RIESGO

abrir ↗

Referência

CVE-2015-2068

CVE-2015-2068—

Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server a

43RIESGO

abrir ↗

Referência✓ VexDay Proof

Aconon Mail 2004 - Directory Traversal

CVE-2008-0464—webappscgi

Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterpr

23RIESGO

abrir ↗

Referência

CVE-2010-2891

CVE-2010-2891—

Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute ar

28RIESGO

abrir ↗

Referência

CVE-2017-9080

CVE-2017-9080—

PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile

50RIESGO

abrir ↗

Referência

CVE-2011-0354

CVE-2011-0354—

The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with softwar

28RIESGO

abrir ↗

Referência

CVE-2017-0211

CVE-2017-0211—

An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_Musica - 'id' SQL Injection

CVE-2008-6234—webappsphp

SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.