Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.056exploits catalogados
35.925CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8755Nuclei 4333Metasploit 3478✓ solo verificadosrecientespopularesriesgo
22.600 exploits
Referência
CVE-2012-4057
CVE-2012-4057—
Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute arbitrary code via a crafted
23RIESGO
abrir ↗
Referência
CVE-2026-65920
CVE-2026-65920MEDIUM
Diffusers Path Traversal via weight_map Arbitrary File Read
33RIESGO
abrir ↗
Referência
CVE-2026-65918
CVE-2026-65918HIGH
PyTorch torchvision GIF Decoder Out-of-bounds Heap Read
41RIESGO
abrir ↗
Referência
CVE-2026-65702
CVE-2026-65702HIGH
Vanna 2.0.2 Path Traversal via FileSystemConversationStore
41RIESGO
abrir ↗
Referência
CVE-2026-65701
CVE-2026-65701CRITICAL
SoftVC VITS Singing Voice Conversion Path Traversal via /wav2wav Flask Route
48RIESGO
abrir ↗
Referência
CVE-2010-4864
CVE-2010-4864—
SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to execu
23RIESGO
abrir ↗
Referência
CVE-2010-4866
CVE-2010-4866—
SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2010-4869
CVE-2010-4869—
SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Referência
CVE-2018-1121
CVE-2018-1121LOW
procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() return
28RIESGO
abrir ↗
Referência
CVE-2018-18619
CVE-2018-18619—
internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability bec
23RIESGO
abrir ↗
Referência
CVE-2018-18619
CVE-2018-18619—
internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability bec
23RIESGO
abrir ↗
Referência
CVE-2017-12952
CVE-2017-12952—
The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer d
23RIESGO
abrir ↗
Referência
CVE-2013-1763
CVE-2013-1763—
Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l
23RIESGO
abrir ↗
Referência
CVE-2010-4921
CVE-2010-4921—
SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2013-3535
CVE-2013-3535—
Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência
CVE-2014-4312
CVE-2014-4312—
Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CMS Faethon 2.2 Ultimate - Remote File Inclusion / Cross-Site Scripting
CVE-2008-2127—webappsphp
Cross-site scripting (XSS) vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arb
23RIESGO
abrir ↗
Referência
CVE-2015-8284
CVE-2015-8284—
SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.
23RIESGO
abrir ↗
Referência
CVE-2015-8284
CVE-2015-8284—
SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.
23RIESGO
abrir ↗
Referência
CVE-2018-9245
CVE-2018-9245—
The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that a
23RIESGO
abrir ↗
Referência
CVE-2025-9090
CVE-2025-9090MEDIUM
Tenda AC20 Telnet Service telnet websFormDefine command injection
38RIESGO
abrir ↗
Referência✓ VexDay Proof
Phpjobscheduler 3.0 - 'installed_config_file' File Inclusion
CVE-2006-5928—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Phpjobscheduler 3.0 allow remote attackers to execute arbitrary PH
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RsGallery2 < 1.11.2 - 'rsgallery.html.php' File Inclusion
CVE-2006-6962—webappsphp
PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for
23RIESGO
abrir ↗
Referência
CVE-2010-4925
CVE-2010-4925—
SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2010-4926
CVE-2010-4926—
SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2013-4900
CVE-2013-4900—
Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote
23RIESGO
abrir ↗
Referência
CVE-2016-7225
CVE-2016-7225—
Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to
23RIESGO
abrir ↗
Referência
CVE-2016-7224
CVE-2016-7224—
Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 151
23RIESGO
abrir ↗
Referência✓ VexDay Proof
My PHP Indexer 1.0 - 'index.php' Local File Download
CVE-2008-6183—webappsphp
Multiple directory traversal vulnerabilities in index.php in My PHP Indexer 1.0 allow remote attackers to read arbitrary
23RIESGO
abrir ↗
Referência
CVE-2012-4260
CVE-2012-4260—
Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗
← anteriorpágina 614 / 754siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.