Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.137exploits catalogados
35.961CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
22.640 exploits
Referência
CVE-2015-7566
CVE-2015-7566—
The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate a
23RIESGO
abrir ↗
Referência
CVE-2015-7567
CVE-2015-7567—
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passw
23RIESGO
abrir ↗
Referência✓ VexDay Proof
zeeproperty 1.0 - Arbitrary File Upload / Cross-Site Scripting
CVE-2008-6915—webappsphp
Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2009-4692
CVE-2009-4692—
Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject
23RIESGO
abrir ↗
Referência
CVE-2009-4697
CVE-2009-4697—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbi
23RIESGO
abrir ↗
Referência
CVE-2009-3719
CVE-2009-3719—
Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2010-2340
CVE-2010-2340—
SQL injection vulnerability in members.php in Arab Portal 2.2, when magic_quotes_gpc is disabled, allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Enthrallweb ePhotos 1.0 - 'subLevel2.asp' SQL Injection
CVE-2006-3027—webappsasp
Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2017-16843
CVE-2017-16843—
Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic
23RIESGO
abrir ↗
Referência
CVE-2014-125116
CVE-2014-125116CRITICAL
HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection
63RIESGO
abrir ↗
Referência
CVE-2014-125116
CVE-2014-125116CRITICAL
HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection
63RIESGO
abrir ↗
Referência
CVE-2014-125116
CVE-2014-125116CRITICAL
HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection
63RIESGO
abrir ↗
Referência
CVE-2020-8493
CVE-2020-8493MEDIUM
A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via
33RIESGO
abrir ↗
Referência
CVE-2008-6325
CVE-2008-6325—
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RIESGO
abrir ↗
Referência
CVE-2026-75778
CVE-2026-75778MEDIUM
code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection
33RIESGO
abrir ↗
Referência
CVE-2009-3152
CVE-2009-3152—
Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Profession
23RIESGO
abrir ↗
Referência
CVE-2026-75774
CVE-2026-75774MEDIUM
karakeep-app karakeep OAuth Sign-In auth.ts improper authentication
33RIESGO
abrir ↗
Referência
CVE-2009-4384
CVE-2009-4384—
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inje
23RIESGO
abrir ↗
Referência
CVE-2009-4384
CVE-2009-4384—
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inje
23RIESGO
abrir ↗
Referência
CVE-2009-2571
CVE-2009-2571—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2009-3747
CVE-2009-3747—
Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Referência✓ VexDay Proof
moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting
CVE-2009-1367—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2009-3911
CVE-2009-3911—
Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-2438
CVE-2009-2438—
Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remo
23RIESGO
abrir ↗
Referência
CVE-2012-10030
CVE-2012-10030CRITICAL
FreeFloat FTP Server Arbitrary File Upload
63RIESGO
abrir ↗
Referência
CVE-2012-10030
CVE-2012-10030CRITICAL
FreeFloat FTP Server Arbitrary File Upload
63RIESGO
abrir ↗
Referência
CVE-2010-5018
CVE-2010-5018—
Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script all
23RIESGO
abrir ↗
Referência
CVE-2010-5018
CVE-2010-5018—
Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script all
23RIESGO
abrir ↗
Referência
CVE-2010-4610
CVE-2010-4610—
Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-4926
CVE-2009-4926—
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RIESGO
abrir ↗
← anteriorpágina 654 / 755siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.