Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.137exploits catalogados
35.961CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
22.640 exploits
Referência
CVE-2013-3531
CVE-2013-3531—
SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2026-13726
CVE-2026-13726HIGH
Multiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcode
41RIESGO
abrir ↗
Referência
CVE-2012-1018
CVE-2012-1018—
Cross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency Converter (mod_currencyconvert
23RIESGO
abrir ↗
Referência✓ VexDay Proof
cf shopkart 5.2.2 - SQL Injection / File Disclosure
CVE-2008-6321—webappsasp
CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Aardvark Topsites PHP 4.2.2 - 'lostpw.php' Remote File Inclusion
CVE-2006-2149—webappsphp
PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_
23RIESGO
abrir ↗
Referência
CVE-2026-10249
CVE-2026-10249MEDIUM
itsourcecode Online Blood Bank Management System viewrequest.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2013-2680
CVE-2013-2680—
Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive in
23RIESGO
abrir ↗
Referência
CVE-2026-16735
CVE-2026-16735MEDIUM
release-it conventional-changelog Changelog File index.js writeChangelog os command injection
33RIESGO
abrir ↗
Referência
CVE-2021-27308
CVE-2021-27308—
A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to in
23RIESGO
abrir ↗
Referência
CVE-2026-63080
CVE-2026-63080HIGH
Aptabase SQL Injection via ClickHouse query backend
41RIESGO
abrir ↗
Referência
CVE-2026-12592
CVE-2026-12592HIGH
SlimStat Analytics < 5.5.0 - Unauthenticated Stored XSS via CF-IPCountry Header
41RIESGO
abrir ↗
Referência✓ VexDay Proof
HIOX Banner Rotator 1.3 - 'hm' Remote File Inclusion
CVE-2008-3127—webappsphp
PHP remote file inclusion vulnerability in hioxBannerRotate.php in HIOX Banner Rotator (HBR) 1.3, when register_globals
23RIESGO
abrir ↗
Referência
CVE-2026-16217
CVE-2026-16217MEDIUM
guohongze adminset Delivery Deployment Endpoint deli.py authorization
33RIESGO
abrir ↗
Referência
CVE-2026-16216
CVE-2026-16216MEDIUM
geex-arts django-jet OAuth cross-site request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-16211
CVE-2026-16211LOW
allegro Hostname Allocation assets.py AssetLastHostname.increment_hostname race condition
28RIESGO
abrir ↗
Referência
CVE-2026-16210
CVE-2026-16210MEDIUM
newpanjing simpleui AjaxAdmin AJAX Endpoint admin.py self.get_action missing authentication
33RIESGO
abrir ↗
Referência
CVE-2017-17627
CVE-2017-17627—
Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17627
CVE-2017-17627—
Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-15970
CVE-2017-15970—
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-15970
CVE-2017-15970—
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.
23RIESGO
abrir ↗
Referência
CVE-2009-3171
CVE-2009-3171—
Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2012-2629
CVE-2012-2629—
Multiple cross-site request forgery (CSRF) and cross-site scripting (XSS) vulnerabilities in Axous 1.1.1 and earlier all
23RIESGO
abrir ↗
Referência
CVE-2012-2629
CVE-2012-2629—
Multiple cross-site request forgery (CSRF) and cross-site scripting (XSS) vulnerabilities in Axous 1.1.1 and earlier all
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component BibTeX 1.3 - Blind SQL Injection
CVE-2007-4502—webappsphp
SQL injection vulnerability in index.php in the BibTeX component (com_jombib) 1.3 and earlier for Joomla! allows remote
23RIESGO
abrir ↗
Referência
CVE-2009-3545
CVE-2009-3545—
DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial of service (crash) via
23RIESGO
abrir ↗
Referência
CVE-2021-33353
CVE-2021-33353CRITICAL
Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows at
48RIESGO
abrir ↗
Referência
CVE-2007-6191
CVE-2007-6191—
Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execut
23RIESGO
abrir ↗
Referência
CVE-2012-1613
CVE-2012-1613—
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote aut
23RIESGO
abrir ↗
Referência
CVE-2012-1613
CVE-2012-1613—
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote aut
23RIESGO
abrir ↗
Referência
CVE-2017-16962
CVE-2017-16962—
The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities vi
23RIESGO
abrir ↗
← anteriorpágina 647 / 755siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.