Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência✓ VexDay Proof
fipsForum 2.6 - 'default2.asp' SQL Injection
CVE-2006-6116—webappsasp
SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2017-14147
CVE-2017-14147—
An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to ea
35RIESGO
abrir ↗
Referência
CVE-2018-0835
CVE-2018-0835—
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RIESGO
abrir ↗
Referência✓ VexDay Proof
WonderCMS 3.1.3 - 'content' Persistent Cross-Site Scripting
CVE-2020-29233—webappsphp
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allo
23RIESGO
abrir ↗
Referência
WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting
CVE-2020-29469—webappsphp
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This vulnerability can allow an attacke
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NULL FTP Server 1.1.0.7 - 'Site' Command Injection
CVE-2008-6534—remotewindows
Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute
23RIESGO
abrir ↗
Referência
CVE-2010-4902
CVE-2010-4902—
Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attacke
23RIESGO
abrir ↗
Referência
CVE-2017-14147
CVE-2017-14147—
An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to ea
35RIESGO
abrir ↗
Referência
CVE-2016-2296
CVE-2016-2296—
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pag
50RIESGO
abrir ↗
Referência
CVE-2013-5019
CVE-2013-5019—
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour
50RIESGO
abrir ↗
Referência
CVE-2015-1486
CVE-2015-1486—
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers t
50RIESGO
abrir ↗
Referência
CVE-2026-108805
CVE-2026-108805MEDIUM
krupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query sql injection
33RIESGO
abrir ↗
Referência
CVE-2017-11764
CVE-2017-11764—
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code
35RIESGO
abrir ↗
Referência
CVE-2018-1217
CVE-2018-1217—
Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection A
50RIESGO
abrir ↗
Referência
CVE-2022-44149
CVE-2022-44149HIGH
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by
53RIESGO
abrir ↗
Referência✓ VexDay Proof
CJ Ultra Plus 1.0.4 - Cookie SQL Injection
CVE-2008-4241—webappsphp
SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Windows Server - Code Execution (PoC) (MS08-067)
CVE-2008-4250CRITICALbajo ataquedoswindows
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RIESGO
abrir ↗
Referência✓ VexDay Proof
cf shopkart 5.2.2 - SQL Injection / File Disclosure
CVE-2008-6320—webappsasp
SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MercuryBoard 1.1.5 - 'login.php' Blind SQL Injection
CVE-2008-6632—webappsphp
SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Shader TV (Beta) - Multiple SQL Injections
CVE-2008-6641—webappsasp
Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrar
23RIESGO
abrir ↗
Referência
CVE-2010-4976
CVE-2010-4976—
Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2011-5002
CVE-2011-5002—
Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via
23RIESGO
abrir ↗
Referência
CVE-2013-5019
CVE-2013-5019—
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour
50RIESGO
abrir ↗
Referência
CVE-2013-5019
CVE-2013-5019—
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour
50RIESGO
abrir ↗
Referência✓ VexDay Proof
IBM Director < 5.10 - 'Redirect.bat' Directory Traversal
CVE-2006-4681—remotewindows
Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary
23RIESGO
abrir ↗
Referência
CVE-2005-2855
CVE-2005-2855—
Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2020-6857
CVE-2020-6857—
CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FT
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PayProCart 1146078425 - Multiple Remote File Inclusions
CVE-2006-4672—webappsphp
PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
pForum 1.30 - 'showprofil.php' SQL Injection
CVE-2008-4355—webappsphp
SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Volunteer 2.0 - SQL Injection
CVE-2008-6337—webappsphp
SQL injection vulnerability in the Volunteer Management System (com_volunteer) module 2.0 for Joomla! allows remote atta
23RIESGO
abrir ↗
← anteriorpágina 621 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.