Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2026-112140

CVE-2026-112140MEDIUM

llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

UNAK-CMS 1.5 - 'dirroot' Remote File Inclusion

CVE-2006-4890—webappsphp

Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência

CVE-2010-1727

CVE-2010-1727—

SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RIESGO

abrir ↗

Referência

CVE-2010-3460

CVE-2010-3460—

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers

23RIESGO

abrir ↗

Referência

CVE-2010-4279

CVE-2010-4279—

The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which al

50RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Generic library & Framework - 'INCLUDE_PATH' Remote File Inclusion

CVE-2007-0584—webappsphp

PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-neri

45RIESGO

abrir ↗

Referência✓ VexDay Proof

CWB PRO 1.5 - 'INCLUDE_PATH' Remote File Inclusion

CVE-2007-1809—webappsphp

Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XnView 1.92.1 - 'FontName' Slideshow Buffer Overflow

CVE-2008-0069—localwindows

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SapLPD 6.28 (Windows x86) - Remote Buffer Overflow

CVE-2008-0621—remotewindows_x86

Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to

60RIESGO

abrir ↗

Referência✓ VexDay Proof

eXV2 Module MyAnnonces - 'lid' SQL Injection

CVE-2008-1406—webappsphp

SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2 allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Petition 1.02/2.0/3.0 - Authentication Bypass

CVE-2008-6624—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute ar

23RIESGO

abrir ↗

Referência

CVE-2009-2917

CVE-2009-2917—

Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service (crash) or

23RIESGO

abrir ↗

Referência

CVE-2014-0983

CVE-2014-0983—

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/s

38RIESGO

abrir ↗

Referência

CVE-2014-7288

CVE-2014-7288—

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrator

23RIESGO

abrir ↗

Referência

CVE-2015-6787

CVE-2015-6787—

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o

23RIESGO

abrir ↗

Referência

Feng Office 3.7.0.5 - Remote Command Execution (Metasploit)

CVE-2019-9623—webappsphp

Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload

23RIESGO

abrir ↗

Referência

CVE-2015-7571

CVE-2015-7571—

Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadin

23RIESGO

abrir ↗

Referência

CVE-2015-7571

CVE-2015-7571—

Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadin

23RIESGO

abrir ↗

Referência

CVE-2017-3132

CVE-2017-3132—

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthor

38RIESGO

abrir ↗

Referência

CVE-2017-9750

CVE-2017-9750—

opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

acFTP FTP Server 1.5 - 'REST/PBSZ' Remote Denial of Service

CVE-2006-6775—doswindows

acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) P

23RIESGO

abrir ↗

Referência

CVE-2015-6787

CVE-2015-6787—

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TeamSpeak 2.0 (Windows Release) - Remote Denial of Service

CVE-2007-3956—doswindows

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which al

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component NeoGallery 1.1 - SQL Injection

CVE-2008-0752—webappsphp

SQL injection vulnerability in index.php in the Neogallery (com_neogallery) 1.1 component for Joomla! allows remote atta

23RIESGO

abrir ↗

Referência✓ VexDay Proof

nweb2fax 0.2.7 - Multiple Vulnerabilities

CVE-2008-6669—webappsphp

viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in t

23RIESGO

abrir ↗

Referência

CVE-2009-4202

CVE-2009-4202—

Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allows

38RIESGO

abrir ↗

Referência

CVE-2011-0420

CVE-2011-0420—

The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependen

28RIESGO

abrir ↗

Referência

CVE-2014-5287

CVE-2014-5287—

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i

23RIESGO

abrir ↗

Referência

CVE-2014-2927

CVE-2014-2927—

The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before

23RIESGO

abrir ↗

Referência

CVE-2019-11446

CVE-2019-11446—

An issue was discovered in ATutor through 2.2.4. It allows the user to run commands on the server with the teacher user

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.