Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.137exploits catalogados

35.961CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientes populares riesgo

22.657 exploits

Referência✓ VexDay Proof

creative Guestbook 1.0 - Multiple Vulnerabilities

CVE-2007-1479—webappsphp

Cross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject ar

23RIESGO

abrir ↗

Referência

CVE-2009-3368

CVE-2009-3368—

Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component fo

23RIESGO

abrir ↗

Referência

CVE-2026-9295

CVE-2026-9295HIGH

Edimax BR-6428NS POST Request formWirelessTbl buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2014-6420

CVE-2014-6420—

Cross-site scripting (XSS) vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web sc

23RIESGO

abrir ↗

Referência✓ VexDay Proof

dnGuestbook 2.0 - SQL Injection

CVE-2006-1710—webappsphp

SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência

CVE-2005-4415

CVE-2005-4415—

Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web scr

23RIESGO

abrir ↗

Referência

CVE-2025-34042

CVE-2025-34042CRITICAL

Beward N100 IP Camera Remote Command Execution

48RIESGO

abrir ↗

Referência

CVE-2025-34042

CVE-2025-34042CRITICAL

Beward N100 IP Camera Remote Command Execution

48RIESGO

abrir ↗

Referência

CVE-2025-34042

CVE-2025-34042CRITICAL

Beward N100 IP Camera Remote Command Execution

48RIESGO

abrir ↗

Referência

CVE-2019-9701

CVE-2019-9701—

DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue th

23RIESGO

abrir ↗

Referência

CVE-2024-53586

CVE-2024-53586MEDIUM

An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a cra

33RIESGO

abrir ↗

Referência

CVE-2015-7358

CVE-2015-7358—

The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when run

23RIESGO

abrir ↗

Referência

CVE-2015-7358

CVE-2015-7358—

The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when run

23RIESGO

abrir ↗

Referência

CVE-2026-9294

CVE-2026-9294HIGH

Edimax BR-6428NS POST Request formWanTcpipSetup buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2020-13927

CVE-2020-13927CRITICALbajo ataque

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but th

100RIESGO

abrir ↗

Referência

CVE-2009-2551

CVE-2009-2551—

Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject

23RIESGO

abrir ↗

Referência

CVE-2009-4678

CVE-2009-4678—

Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary

23RIESGO

abrir ↗

Referência

CVE-2009-4678

CVE-2009-4678—

Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary

23RIESGO

abrir ↗

Referência

CVE-2009-4478

CVE-2009-4478—

Multiple cross-site scripting (XSS) vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrary

23RIESGO

abrir ↗

Referência

CVE-2015-6009

CVE-2015-6009—

Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2010-3457

CVE-2010-3457—

Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arb

23RIESGO

abrir ↗

Referência

CVE-2010-3457

CVE-2010-3457—

Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arb

23RIESGO

abrir ↗

Referência

CVE-2017-14961

CVE-2017-14961—

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating

23RIESGO

abrir ↗

Referência

CVE-2017-14961

CVE-2017-14961—

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating

23RIESGO

abrir ↗

Referência

CVE-2010-4837

CVE-2010-4837—

Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack

23RIESGO

abrir ↗

Referência

CVE-2010-4837

CVE-2010-4837—

Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack

23RIESGO

abrir ↗

Referência

CVE-2009-4366

CVE-2009-4366—

Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitra

23RIESGO

abrir ↗

Referência

CVE-2022-46637

CVE-2022-46637CRITICAL

Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.

48RIESGO

abrir ↗

Referência

CVE-2010-0936

CVE-2010-0936—

Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allow

23RIESGO

abrir ↗

Referência

CVE-2015-7547

CVE-2015-7547—

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C

45RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.