Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.039exploits catalogados
39.796CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.790Exploit-DB 24.487GitHub PoC 16.910VulnCheck XDB 9820Nuclei 4504Metasploit 3528✓ solo verificadosrecientespopularesriesgo
25.790 exploits
Referência
CVE-2026-97147
CVE-2026-97147HIGH
In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can r
41RIESGO
abrir ↗
Referência
CVE-2010-5284
CVE-2010-5284—
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Referência
CVE-2026-107335
CVE-2026-107335MEDIUM
Improper Handling of Highly Compressed Data in Malcolm
33RIESGO
abrir ↗
Referência
CVE-2010-5287
CVE-2010-5287—
SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute a
23RIESGO
abrir ↗
Referência
CVE-2009-4660
CVE-2009-4660—
Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to
50RIESGO
abrir ↗
Referência
CVE-2014-8654
CVE-2014-8654—
Multiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (CBN) CH6640E and CG6640E Wirele
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Module CBSms 1.0 - Remote File Inclusion
CVE-2006-3294—webappsphp
PHP remote file inclusion vulnerability in mod_cbsms_messages.php in CBSMS Mambo Module 1.0 and earlier, when register_g
23RIESGO
abrir ↗
Referência
CVE-2025-34152
CVE-2025-34152CRITICAL
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter
85RIESGO
abrir ↗
Referência
CVE-2015-3306
CVE-2015-3306CRITICALbajo ataque
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
100RIESGO
abrir ↗
Referência
CVE-2016-1209
CVE-2016-1209—
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via
50RIESGO
abrir ↗
Referência
CVE-2015-1793
CVE-2015-1793—
The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly
50RIESGO
abrir ↗
Referência
CVE-2017-8835
CVE-2017-8835—
SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw
50RIESGO
abrir ↗
Referência✓ VexDay Proof
vxFtpSrv 2.0.3 - 'CWD' Remote Buffer Overflow (PoC)
CVE-2008-4452—doswindows
Buffer overflow in Cambridge Computer Corporation vxFtpSrv 2.0.3 allows remote attackers to cause a denial of service (c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion
CVE-2008-4455—webappsphp
Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic_quotes_gpc
23RIESGO
abrir ↗
Referência
CVE-2015-4133
CVE-2015-4133—
Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 f
50RIESGO
abrir ↗
Referência
CVE-2017-1000119
CVE-2017-1000119—
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise
50RIESGO
abrir ↗
Referência
CVE-2015-8399
CVE-2015-8399—
Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName p
50RIESGO
abrir ↗
Referência
CVE-2023-28502
CVE-2023-28502CRITICAL
Stack buffer overflow in UniRPC's udadmin_server service
75RIESGO
abrir ↗
Referência
CVE-2018-16836
CVE-2018-16836—
Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attac
50RIESGO
abrir ↗
Referência✓ VexDay Proof
DeluxeBB 1.07 - Remote Create Admin
CVE-2006-3304—webappsphp
SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component xstandard editor 1.5.8 - Local Directory Traversal
CVE-2009-0113—webappsphp
Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allo
23RIESGO
abrir ↗
Referência
CVE-2010-5323
CVE-2010-5323—
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
28RIESGO
abrir ↗
Referência
CVE-2011-0018
CVE-2011-0018—
The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authent
23RIESGO
abrir ↗
Referência
CVE-2011-0049
CVE-2011-0049—
Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allo
60RIESGO
abrir ↗
Referência
CVE-2015-4133
CVE-2015-4133—
Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 f
50RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech Visa Zone - 'news_id' SQL Injection
CVE-2008-4462—webappsphp
SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2014-3913
CVE-2014-3913—
Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrar
50RIESGO
abrir ↗
Referência
CVE-2014-3913
CVE-2014-3913—
Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrar
50RIESGO
abrir ↗
Referência
CVE-2018-18982
CVE-2018-18982—
NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can b
50RIESGO
abrir ↗
Referência
CVE-2018-7445
CVE-2018-7445CRITICALbajo ataque
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remot
90RIESGO
abrir ↗
← anteriorpágina 67 / 860siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.