Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.056exploits catalogados
35.925CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8755Nuclei 4333Metasploit 3478✓ solo verificadosrecientespopularesriesgo
22.600 exploits
Referência
CVE-2010-2622
CVE-2010-2622—
SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Docebo 3.5.0.3 - 'lib.regset.php' Command Execution
CVE-2008-7154—webappsphp
Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/cla
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Power Editor 2.0 - Remote File Disclosure / Edit
CVE-2008-2116—webappsphp
Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AJ HYIP ACME - 'news.php' SQL Injection
CVE-2008-2893—webappsphp
SQL injection vulnerability in news.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2026-58460
CVE-2026-58460HIGH
react-native-receive-sharing-intent Path Traversal via _display_name
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Mega File Hosting Script 1.2 - 'url' Remote File Inclusion
CVE-2009-0966—webappsphp
PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2025-10353
CVE-2025-10353CRITICAL
Missing Authorization vulnerability in Melis Platform
63RIESGO
abrir ↗
Referência✓ VexDay Proof
gCards 1.45 - Multiple Vulnerabilities
CVE-2006-1346—webappsphp
Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
gCards 1.45 - Multiple Vulnerabilities
CVE-2006-1348—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TorrentFlux 2.2 - 'maketorrent.php' Remote Command Execution
CVE-2006-6599—webappsphp
maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharact
23RIESGO
abrir ↗
Referência✓ VexDay Proof
project alumni 1.0.9 - 'index.php?act' Local File Inclusion
CVE-2007-6184—webappsphp
Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute ar
23RIESGO
abrir ↗
Referência
CVE-2015-3302
CVE-2015-3302—
The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1
28RIESGO
abrir ↗
Referência
CVE-2015-3306
CVE-2015-3306—
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
60RIESGO
abrir ↗
Referência
CVE-2012-1934
CVE-2012-1934—
SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Prozilla Topsites 1.0 - Arbitrary Edit/Add Users
CVE-2008-1784—webappsphp
Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2
23RIESGO
abrir ↗
Referência
CVE-2016-8807
CVE-2016-8807—
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RIESGO
abrir ↗
Referência✓ VexDay Proof
All Club CMS 0.0.2 - Remote Database Configuration Retrieve
CVE-2008-7069—webappsphp
All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
realm CMS 2.3 - Multiple Vulnerabilities
CVE-2008-2682—webappsphp
_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pag
23RIESGO
abrir ↗
Referência
CVE-2021-42053
CVE-2021-42053—
The Unicorn framework through 0.35.3 for Django allows XSS via component.name.
23RIESGO
abrir ↗
Referência
CVE-2008-6279
CVE-2008-6279—
RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an
23RIESGO
abrir ↗
Referência
CVE-2014-0864
CVE-2014-0864—
Multiple cross-site request forgery (CSRF) vulnerabilities in Executer in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ixprim CMS 1.2 - Blind SQL Injection
CVE-2006-6755—webappsphp
Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ix
23RIESGO
abrir ↗
Referência
CVE-2010-2358
CVE-2010-2358—
PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_quotes_gpc is
23RIESGO
abrir ↗
Referência✓ VexDay Proof
hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities
CVE-2007-6499—webappsasp
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninsta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eLineStudio Site Composer (ESC) 2.6 - Multiple Vulnerabilities
CVE-2008-2864—webappsphp
eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct req
23RIESGO
abrir ↗
Referência
CVE-2010-1701
CVE-2010-1701—
SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TinyWebGallery 1.7.6 - Local File Inclusion / Remote Code Execution
CVE-2009-1911—webappsphp
Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as
23RIESGO
abrir ↗
Referência
CVE-2015-3306
CVE-2015-3306—
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
60RIESGO
abrir ↗
Referência
Multi Language Olx Clone Script - Cross-Site Scripting
CVE-2018-6845—webappsphp
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field.
23RIESGO
abrir ↗
Referência
CVE-2010-2684
CVE-2010-2684—
SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitr
23RIESGO
abrir ↗
← anteriorpágina 625 / 754siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.