Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-82594
CVE-2026-82594LOW
LogNet grpc-spring-boot-starter Annotation Processing improper authorization
28RIESGO
abrir ↗
Referência
CVE-2009-3643
CVE-2009-3643—
Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to th
23RIESGO
abrir ↗
Referência
CVE-2010-0701
CVE-2010-0701—
SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2019-9592
CVE-2019-9592—
A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2019-9592
CVE-2019-9592—
A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eroCMS 1.4 - 'site' SQL Injection
CVE-2008-2792—webappsphp
SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência
CVE-2009-3644
CVE-2009-3644—
SQL injection vulnerability in the Soundset (com_soundset) component 1.0 for Joomla! allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2010-1727
CVE-2010-1727—
SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Referência
CVE-2015-4682
CVE-2015-4682—
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation
23RIESGO
abrir ↗
Referência
CVE-2015-4682
CVE-2015-4682—
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation
23RIESGO
abrir ↗
Referência
CVE-2016-3962
CVE-2016-3962—
Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTI
23RIESGO
abrir ↗
Referência
CVE-2008-1866
CVE-2008-1866—
admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote
23RIESGO
abrir ↗
Referência
CVE-2017-6096
CVE-2017-6096—
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/list
23RIESGO
abrir ↗
Referência
CVE-2021-26855
CVE-2021-26855CRITICALbajo ataqueransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Referência✓ VexDay Proof
PLog 1.0.6 - 'albumID' SQL Injection
CVE-2008-2629—webappsphp
SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2026-79996
CVE-2026-79996HIGH
User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings
41RIESGO
abrir ↗
Referência
CVE-2023-4548
CVE-2023-4548MEDIUM
SPA-Cart eCommerce CMS GET Parameter search sql injection
45RIESGO
abrir ↗
Referência
CVE-2010-1920
CVE-2010-1920—
Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when register_globals is enabled,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting
CVE-2009-0377—webappsphp
SQL injection vulnerability in the beamospetition (com_beamospetition) 1.0.12 component for Joomla! allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2012-1663
CVE-2012-1663—
Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (app
23RIESGO
abrir ↗
Referência
CVE-2012-2591
CVE-2012-2591—
Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attack
23RIESGO
abrir ↗
Referência
CVE-2013-1852
CVE-2013-1852—
SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote at
23RIESGO
abrir ↗
Referência
CVE-2015-1721
CVE-2015-1721—
The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and
23RIESGO
abrir ↗
Referência
CVE-2010-1920
CVE-2010-1920—
Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when register_globals is enabled,
23RIESGO
abrir ↗
Referência
CVE-2010-1947
CVE-2010-1947—
Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enable
23RIESGO
abrir ↗
Referência
CVE-2018-11444
CVE-2018-11444—
A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.
23RIESGO
abrir ↗
Referência
CVE-2018-11535
CVE-2018-11535—
An issue was discovered in SITEMAKIN SLAC (Site Login and Access Control) v1.0. The parameter "my_item_search" in users.
23RIESGO
abrir ↗
Referência
CVE-2017-3064
CVE-2017-3064—
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a sh
28RIESGO
abrir ↗
Referência
CVE-2008-2683
CVE-2008-2683—
The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to for
50RIESGO
abrir ↗
Referência
CVE-2023-4911
CVE-2023-4911HIGHbajo ataque
Glibc: buffer overflow in ld.so leading to privilege escalation
98RIESGO
abrir ↗
← anteriorpágina 644 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.