Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-13558
CVE-2026-13558MEDIUM
CodeAstro Complaint Management System Report addreport cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2012-6081
CVE-2012-6081—
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action
50RIESGO
abrir ↗
Referência
CVE-2015-0065
CVE-2015-0065—
Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Admin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion
CVE-2007-1219—webappsphp
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2016-2098
CVE-2016-2098—
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to e
60RIESGO
abrir ↗
Referência
CVE-2026-110029
CVE-2026-110029MEDIUM
Squeeze < 1.8.1 - Subscriber+ Missing Authorization via squeeze_restore_attachment
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component prayercenter 1.4.9 - 'id' SQL Injection
CVE-2008-6429—webappsphp
SQL injection vulnerability in the PrayerCenter (com_prayercenter) component 1.4.9 and earlier for Joomla! allows remote
23RIESGO
abrir ↗
Referência
CVE-2010-1797
CVE-2010-1797—
Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpr
35RIESGO
abrir ↗
Referência✓ VexDay Proof
virtue news - SQL Injection / Cross-Site Scripting
CVE-2009-2020—webappsphp
Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject arb
23RIESGO
abrir ↗
Referência
CVE-2011-3976
CVE-2011-3976—
Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long file
50RIESGO
abrir ↗
Referência
CVE-2009-2650
CVE-2009-2650—
Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a d
50RIESGO
abrir ↗
Referência
CVE-2014-4141
CVE-2014-4141—
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service
35RIESGO
abrir ↗
Referência
CVE-2018-6794
CVE-2018-6794—
Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious se
28RIESGO
abrir ↗
Referência
CVE-2020-14011
CVE-2020-14011—
Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin accoun
28RIESGO
abrir ↗
Referência
CVE-2022-4101
CVE-2022-4101CRITICAL
Images Optimize and Upload CF7 <= 2.1.4 - Unauthenticated Arbitrary File Deletion
53RIESGO
abrir ↗
Referência
CVE-2015-1730
CVE-2015-1730—
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor
28RIESGO
abrir ↗
Referência
CVE-2017-0901
CVE-2017-0901—
RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potenti
28RIESGO
abrir ↗
Referência
CVE-2017-5173
CVE-2017-5173—
An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD
28RIESGO
abrir ↗
Referência
CVE-2016-0998
CVE-2016-0998—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
28RIESGO
abrir ↗
Referência
CVE-2019-9810
CVE-2019-9810—
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check
28RIESGO
abrir ↗
Referência
CVE-2015-7648
CVE-2015-7648—
Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux all
28RIESGO
abrir ↗
Referência
CVE-2009-2778
CVE-2009-2778—
Cross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject arb
23RIESGO
abrir ↗
Referência
CVE-2026-19382
CVE-2026-19382MEDIUM
Almico Speedfan MSR Index speedfan.sys KiSystemCall64 memory leak
33RIESGO
abrir ↗
Referência
CVE-2026-16594
CVE-2026-16594HIGH
WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure
41RIESGO
abrir ↗
Referência
CVE-2012-2741
CVE-2012-2741—
Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2016-0998
CVE-2016-0998—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
28RIESGO
abrir ↗
Referência
CVE-2017-20278
CVE-2017-20278HIGH
Joomla JoomRecipe 1.0.3 SQL Injection via category parameter
41RIESGO
abrir ↗
Referência✓ VexDay Proof
PMB Services 3.0.13 - Multiple Remote File Inclusions
CVE-2007-1415—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2026-111379
CVE-2026-111379HIGH
FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3
41RIESGO
abrir ↗
Referência
CVE-2018-1189
CVE-2018-1189—
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
28RIESGO
abrir ↗
← anteriorpágina 642 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.