Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência✓ VexDay Proof
News Bin Pro 5.33 - '.nbi' Local Buffer Overflow
CVE-2007-1074—localwindows
Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TurboFTP Server 5.30 Build 572 - 'newline/LIST' Multiple Remote Denial of Service Vulnerabilities
CVE-2007-1075—doswindows
TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large
23RIESGO
abrir ↗
Referência
CVE-2017-6527
CVE-2017-6527—
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal att
50RIESGO
abrir ↗
Referência
CVE-2018-14485
CVE-2018-14485—
BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Sinapis Forum 2.2 - 'sinapis.php?fuss' Remote File Inclusion
CVE-2007-1131—webappsphp
PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2018-7358
CVE-2018-7358MEDIUM
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper cha
55RIESGO
abrir ↗
Referência
CVE-2018-14728
CVE-2018-14728—
upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
60RIESGO
abrir ↗
Referência
CVE-2026-105809
CVE-2026-105809MEDIUM
SourceCodester Simple Student Information System Profile Field register.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2022-0847
CVE-2022-0847HIGHbajo ataque
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RIESGO
abrir ↗
Referência
CVE-2026-105808
CVE-2026-105808MEDIUM
SourceCodester Simple Student Information System searchresults.php clean cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-105778
CVE-2026-105778CRITICAL
Tenda AC5 Wifi setWifi stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2026-86786
CVE-2026-86786MEDIUM
Slider Pro <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via sliderpro_multiple_images
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft SQL Server - Distributed Management Objects Buffer Overflow
CVE-2007-4814—remotewindows
Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.200
35RIESGO
abrir ↗
Referência
CVE-2017-7228
CVE-2017-7228—
An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The e
23RIESGO
abrir ↗
Referência
CVE-2017-7269
CVE-2017-7269CRITICALbajo ataque
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RIESGO
abrir ↗
Referência
CVE-2017-7269
CVE-2017-7269CRITICALbajo ataque
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RIESGO
abrir ↗
Referência
CVE-2018-7581
CVE-2018-7581—
\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions (BUIL
23RIESGO
abrir ↗
Referência
CVE-2018-7584
CVE-2018-7584—
In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer
45RIESGO
abrir ↗
Referência
CVE-2018-7600
CVE-2018-7600CRITICALbajo ataqueransomware
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Foxit Reader 9.7.1 - Remote Command Execution (Javascript API)
CVE-2020-14425—localwindows
Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can exe
35RIESGO
abrir ↗
Referência
CVE-2020-1472
CVE-2020-1472MEDIUMbajo ataqueransomware
Netlogon Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke Module splattforum 4.0 RC1 - Local File Inclusion
CVE-2007-1633—webappsphp
Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allo
23RIESGO
abrir ↗
Referência
CVE-2026-105315
CVE-2026-105315MEDIUM
django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
ClassWeb 2.0.3 - 'BASE' Remote File Inclusion
CVE-2007-1640—webappsphp
Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpRealty 0.02 - 'MGR' Multiple Remote File Inclusions
CVE-2007-4834—webappsphp
Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP cod
35RIESGO
abrir ↗
Referência
CVE-2017-7411
CVE-2017-7411—
An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentEl
50RIESGO
abrir ↗
Referência
CVE-2017-7411
CVE-2017-7411—
An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentEl
50RIESGO
abrir ↗
Referência
CVE-2017-7457
CVE-2017-7457—
XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure.
23RIESGO
abrir ↗
Referência
CVE-2026-82680
CVE-2026-82680HIGH
D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write
41RIESGO
abrir ↗
Referência
CVE-2017-9730
CVE-2017-9730—
SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitra
23RIESGO
abrir ↗
← anteriorpágina 608 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.