Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-89261
CVE-2026-89261MEDIUM
MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection
CVE-2008-0429—webappsphp
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execut
23RIESGO
abrir ↗
Referência
CVE-2009-2777
CVE-2009-2777—
SQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FileZilla FTP Server 0.9.21 - 'LIST/NLST' Denial of Service
CVE-2006-6565—doswindows
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to t
60RIESGO
abrir ↗
Referência✓ VexDay Proof
OZJournals 2.1.1 - 'id' File Disclosure
CVE-2008-0435—webappsphp
Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary
23RIESGO
abrir ↗
Referência
CVE-2010-1179
CVE-2010-1179—
Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash)
23RIESGO
abrir ↗
Referência
CVE-2013-1599
CVE-2013-1599—
A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firm
35RIESGO
abrir ↗
Referência
CVE-2017-17058
CVE-2017-17058HIGH
The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/wooco
46RIESGO
abrir ↗
Referência
CVE-2018-7653
CVE-2018-7653—
In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.
38RIESGO
abrir ↗
Referência
CVE-2014-9000
CVE-2014-9000—
Mule Enterprise Management Console (MMC) does not properly restrict access to handler/securityService.rpc, which allows
23RIESGO
abrir ↗
Referência
CVE-2015-7894
CVE-2015-7894—
The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allow
23RIESGO
abrir ↗
Referência
CVE-2017-4914
CVE-2017-4914—
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of th
23RIESGO
abrir ↗
Referência
CVE-2026-113142
CVE-2026-113142MEDIUM
Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromi
33RIESGO
abrir ↗
Referência
CVE-2020-8644
CVE-2020-8644CRITICALbajo ataque
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.
100RIESGO
abrir ↗
Referência
CVE-2009-2533
CVE-2009-2533—
rmserver in RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allows remote attackers to cause a denial of
23RIESGO
abrir ↗
Referência
CVE-2017-17058
CVE-2017-17058HIGH
The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/wooco
46RIESGO
abrir ↗
Referência
CVE-2018-7653
CVE-2018-7653—
In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.
38RIESGO
abrir ↗
Referência
CVE-2016-20100
CVE-2016-20100HIGH
Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview
41RIESGO
abrir ↗
Referência✓ VexDay Proof
WordPress Plugin Adserve 0.2 - 'adclick.php' SQL Injection
CVE-2008-0507—webappsphp
SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2010-1599
CVE-2010-1599—
SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2012-5329
CVE-2012-5329—
Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application cr
23RIESGO
abrir ↗
Referência
CVE-2014-125133
CVE-2014-125133HIGH
NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php
41RIESGO
abrir ↗
Referência
CVE-2013-1606
CVE-2013-1606—
Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allow
28RIESGO
abrir ↗
Referência
CVE-2015-8357
CVE-2015-8357—
Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users t
23RIESGO
abrir ↗
Referência
CVE-2015-8357
CVE-2015-8357—
Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users t
23RIESGO
abrir ↗
Referência
CVE-2017-10309
CVE-2017-10309—
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affecte
23RIESGO
abrir ↗
Referência
CVE-2017-8311
CVE-2017-8311—
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an inpu
23RIESGO
abrir ↗
Referência
CVE-2014-125132
CVE-2014-125132MEDIUM
Blogroll Fun WordPress Plugin < 0.8.5 Reflected XSS via blogroll.php
33RIESGO
abrir ↗
Referência
CVE-2012-20005
CVE-2012-20005MEDIUM
SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg Parameter
33RIESGO
abrir ↗
Referência
CVE-2012-20004
CVE-2012-20004MEDIUM
K-news WordPress Plugin < 1.1.1 Reflected XSS via fontpicker index.php ff Parameter
33RIESGO
abrir ↗
← anteriorpágina 652 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.