Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.137exploits catalogados
35.961CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
22.640 exploits
Referência✓ VexDay Proof
otscms 2.1.5 - SQL Injection / Cross-Site Scripting
CVE-2007-0846—webappsphp
Cross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
creative Guestbook 1.0 - Multiple Vulnerabilities
CVE-2007-1479—webappsphp
Cross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject ar
23RIESGO
abrir ↗
Referência
CVE-2009-3368
CVE-2009-3368—
Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component fo
23RIESGO
abrir ↗
Referência
CVE-2026-9295
CVE-2026-9295HIGH
Edimax BR-6428NS POST Request formWirelessTbl buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2014-6420
CVE-2014-6420—
Cross-site scripting (XSS) vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Referência✓ VexDay Proof
dnGuestbook 2.0 - SQL Injection
CVE-2006-1710—webappsphp
SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2005-4415
CVE-2005-4415—
Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Referência
CVE-2025-34042
CVE-2025-34042CRITICAL
Beward N100 IP Camera Remote Command Execution
48RIESGO
abrir ↗
Referência
CVE-2025-34042
CVE-2025-34042CRITICAL
Beward N100 IP Camera Remote Command Execution
48RIESGO
abrir ↗
Referência
CVE-2025-34042
CVE-2025-34042CRITICAL
Beward N100 IP Camera Remote Command Execution
48RIESGO
abrir ↗
Referência
CVE-2019-9701
CVE-2019-9701—
DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue th
23RIESGO
abrir ↗
Referência
CVE-2024-53586
CVE-2024-53586MEDIUM
An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a cra
33RIESGO
abrir ↗
Referência
CVE-2015-7358
CVE-2015-7358—
The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when run
23RIESGO
abrir ↗
Referência
CVE-2015-7358
CVE-2015-7358—
The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when run
23RIESGO
abrir ↗
Referência
CVE-2026-9294
CVE-2026-9294HIGH
Edimax BR-6428NS POST Request formWanTcpipSetup buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2020-13927
CVE-2020-13927CRITICALbajo ataque
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but th
100RIESGO
abrir ↗
Referência
CVE-2010-4893
CVE-2010-4893—
Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Referência
CVE-2026-41949
CVE-2026-41949HIGH
Dify < 1.14.2 Authorization Bypass via File Preview Endpoint
41RIESGO
abrir ↗
Referência
CVE-2016-7390
CVE-2016-7390—
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RIESGO
abrir ↗
Referência
CVE-2023-4117
CVE-2023-4117MEDIUM
PHP Jabbers Rental Property Booking index.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-41948
CVE-2026-41948CRITICAL
Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access
48RIESGO
abrir ↗
Referência✓ VexDay Proof
ModernBill 4.4.x - Cross-Site Scripting / Remote File Inclusion
CVE-2008-5059—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject ar
23RIESGO
abrir ↗
Referência
CVE-2015-2198
CVE-2015-2198—
Multiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4 allow remote attackers to i
23RIESGO
abrir ↗
Referência
CVE-2009-20009
CVE-2009-20009CRITICAL
Belkin Bulldog Plus Web Service Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2009-20009
CVE-2009-20009CRITICAL
Belkin Bulldog Plus Web Service Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2025-34055
CVE-2025-34055CRITICAL
AVTECH IP camera, DVR, and NVR Devices Authenticated Root Command Execution
48RIESGO
abrir ↗
Referência
CVE-2020-14295
CVE-2020-14295—
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead
60RIESGO
abrir ↗
Referência
CVE-2015-7547
CVE-2015-7547—
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RIESGO
abrir ↗
Referência✓ VexDay Proof
cPanel WebHost Manager (WHM) - '/webmail/x3/mail/clientconf.html?acct' Cross-Site Scripting
CVE-2012-6448—webappsphp
Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Enterprise Payroll Systems 1.1 - 'footer' Remote File Inclusion
CVE-2006-2982—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier all
23RIESGO
abrir ↗
← anteriorpágina 652 / 755siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.