Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.137exploits catalogados
35.961CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
22.640 exploits
Referência
CVE-2010-1361
CVE-2010-1361—
Cross-site scripting (XSS) vulnerability in shop/USER_ARTIKEL_HANDLING_AUFRUF.php in PHPepperShop 2.5 allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2018-14533
CVE-2018-14533—
read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /v
23RIESGO
abrir ↗
Referência
CVE-2013-7274
CVE-2013-7274—
Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitr
23RIESGO
abrir ↗
Referência
CVE-2015-7707
CVE-2015-7707—
Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter
23RIESGO
abrir ↗
Referência
CVE-2009-4359
CVE-2009-4359—
Cross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2007-6673
CVE-2007-6673—
Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTM
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AvailScript Article Script - 'articles.php' Multiple Vulnerabilities
CVE-2008-4372—webappsphp
Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject
23RIESGO
abrir ↗
Referência
CVE-2011-10013
CVE-2011-10013CRITICAL
Traq 2.0–2.3 admincp/common.php RCE
63RIESGO
abrir ↗
Referência
CVE-2011-10013
CVE-2011-10013CRITICAL
Traq 2.0–2.3 admincp/common.php RCE
63RIESGO
abrir ↗
Referência
CVE-2011-10013
CVE-2011-10013CRITICAL
Traq 2.0–2.3 admincp/common.php RCE
63RIESGO
abrir ↗
Referência
CVE-2010-2341
CVE-2010-2341—
PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta al
23RIESGO
abrir ↗
Referência
CVE-2010-2341
CVE-2010-2341—
PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta al
23RIESGO
abrir ↗
Referência
CVE-2010-2342
CVE-2010-2342—
SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Bandwebsite 1.5 - SQL Injection / Cross-Site Scripting
CVE-2008-5338—webappsphp
Cross-site scripting (XSS) vulnerability in info.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attac
23RIESGO
abrir ↗
Referência
CVE-2015-7707
CVE-2015-7707—
Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter
23RIESGO
abrir ↗
Referência
CVE-2026-75784
CVE-2026-75784CRITICAL
TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2026-32985
CVE-2026-32985CRITICAL
Xerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code Execution
63RIESGO
abrir ↗
Referência
CVE-2010-3858
CVE-2010-3858—
The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does n
23RIESGO
abrir ↗
Referência
CVE-2020-37169
CVE-2020-37169MEDIUM
WordPress Plugin ultimate-member 2.1.3 Local File Inclusion
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Rankem - File Disclosure / Cross-Site Scripting / Cookie
CVE-2009-0248—webappsphp
Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrar
23RIESGO
abrir ↗
Referência
CVE-2026-19726
CVE-2026-19726MEDIUM
Visualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure
33RIESGO
abrir ↗
Referência
CVE-2022-25630
CVE-2022-25630MEDIUM
An authenticated user can embed malicious content with XSS into the admin group policy page.
33RIESGO
abrir ↗
Referência
CVE-2010-2359
CVE-2010-2359—
SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting
CVE-2009-0378—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in the beamospetition (com_beamospetition) 1.0.12 component for Jo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SmartSite CMS 1.0 - 'root' Remote File Inclusion
CVE-2006-3162—webappsphp
PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2010-0371
CVE-2010-0371—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to injec
23RIESGO
abrir ↗
Referência
CVE-2012-6518
CVE-2012-6518—
Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authenti
23RIESGO
abrir ↗
Referência
CVE-2010-0365
CVE-2010-0365—
Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows re
23RIESGO
abrir ↗
Referência
CVE-2010-2715
CVE-2010-2715—
Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbi
23RIESGO
abrir ↗
Referência
CVE-2010-3895
CVE-2010-3895—
esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitr
23RIESGO
abrir ↗
← anteriorpágina 648 / 755siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.