Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-92411
CVE-2026-92411MEDIUM
WP Delicious < 1.10.8 - Contributor+ Stored XSS via Recipe Block Tag Name
33RIESGO
abrir ↗
Referência
CVE-2010-1089
CVE-2010-1089—
SQL injection vulnerability in vedi_faq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-1719
CVE-2010-1719—
Directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla! allows remote attacke
38RIESGO
abrir ↗
Referência
CVE-2010-4776
CVE-2010-4776—
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2010-0698
CVE-2010-0698—
SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Overflow
CVE-2007-3435—remotewindows
Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) Bar
50RIESGO
abrir ↗
Referência
CVE-2010-0698
CVE-2010-0698—
SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2012-3845
CVE-2012-3845—
Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service (crash) via a l
23RIESGO
abrir ↗
Referência
CVE-2009-3757
CVE-2009-3757—
Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb
23RIESGO
abrir ↗
Referência
CVE-2010-1719
CVE-2010-1719—
Directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla! allows remote attacke
38RIESGO
abrir ↗
Referência
CVE-2015-4682
CVE-2015-4682—
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation
23RIESGO
abrir ↗
Referência
CVE-2015-4682
CVE-2015-4682—
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation
23RIESGO
abrir ↗
Referência
CVE-2016-3962
CVE-2016-3962—
Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTI
23RIESGO
abrir ↗
Referência
CVE-2008-1866
CVE-2008-1866—
admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote
23RIESGO
abrir ↗
Referência
CVE-2017-6096
CVE-2017-6096—
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/list
23RIESGO
abrir ↗
Referência
CVE-2021-26855
CVE-2021-26855CRITICALbajo ataqueransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Referência✓ VexDay Proof
PLog 1.0.6 - 'albumID' SQL Injection
CVE-2008-2629—webappsphp
SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2026-79996
CVE-2026-79996HIGH
User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings
41RIESGO
abrir ↗
Referência
CVE-2023-4548
CVE-2023-4548MEDIUM
SPA-Cart eCommerce CMS GET Parameter search sql injection
45RIESGO
abrir ↗
Referência
CVE-2010-1920
CVE-2010-1920—
Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when register_globals is enabled,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting
CVE-2009-0377—webappsphp
SQL injection vulnerability in the beamospetition (com_beamospetition) 1.0.12 component for Joomla! allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2012-1663
CVE-2012-1663—
Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (app
23RIESGO
abrir ↗
Referência
CVE-2012-2591
CVE-2012-2591—
Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attack
23RIESGO
abrir ↗
Referência
CVE-2013-1852
CVE-2013-1852—
SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote at
23RIESGO
abrir ↗
Referência
CVE-2015-1721
CVE-2015-1721—
The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and
23RIESGO
abrir ↗
Referência
CVE-2010-1920
CVE-2010-1920—
Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when register_globals is enabled,
23RIESGO
abrir ↗
Referência
CVE-2010-1947
CVE-2010-1947—
Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enable
23RIESGO
abrir ↗
Referência
CVE-2026-18365
CVE-2026-18365MEDIUM
Zportals < 6.4.2 - Subscriber+ User Email Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-79804
CVE-2026-79804MEDIUM
SililaWijesinghe Food Ordering System search.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2015-1575
CVE-2015-1575—
Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
← anteriorpágina 615 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.