Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.331exploits catalogados
40.631CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.377Exploit-DB 24.489GitHub PoC 18.131VulnCheck XDB 10.218Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.377 exploits
Referência
CVE-2018-0968
CVE-2018-0968—
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio
23RIESGO
abrir ↗
Referência
CVE-2020-14943
CVE-2020-14943—
The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cros
23RIESGO
abrir ↗
Referência
CVE-2022-39285
CVE-2022-39285HIGH
Stored Cross-Site Scripting Vulnerability In File Parameter in zoneminder
41RIESGO
abrir ↗
Referência
CVE-2026-4567
CVE-2026-4567CRITICAL
Tenda A15 UploadCfg stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2022-3481
CVE-2022-3481CRITICAL
WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
63RIESGO
abrir ↗
Referência
CVE-2026-86449
CVE-2026-86449MEDIUM
LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API
33RIESGO
abrir ↗
Referência✓ VexDay Proof
makit Newsposter Script 3.0 - SQL Injection
CVE-2007-0600—webappsasp
SQL injection vulnerability in news_page.asp in Martyn Kilbryde Newsposter Script (aka makit news/blog poster) 3 and ear
23RIESGO
abrir ↗
Referência
CVE-2010-1302
CVE-2010-1302—
Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! a
38RIESGO
abrir ↗
Referência
CVE-2010-1304
CVE-2010-1304—
Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! al
43RIESGO
abrir ↗
Referência
CVE-2017-17062
CVE-2017-17062—
The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev4
23RIESGO
abrir ↗
Referência
CVE-2026-88793
CVE-2026-88793HIGH
YouTube Embed 10.0 - 10.3 - Unauthenticated Stored XSS via youram_server
41RIESGO
abrir ↗
Referência
CVE-2017-9095
CVE-2017-9095—
XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled d
23RIESGO
abrir ↗
Referência
CVE-2014-0870
CVE-2014-0870—
Multiple cross-site scripting (XSS) vulnerabilities in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 be
23RIESGO
abrir ↗
Referência
CVE-2018-5406
CVE-2018-5406—
The Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism.
28RIESGO
abrir ↗
Referência
CVE-2016-7188
CVE-2016-7188—
The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles librar
23RIESGO
abrir ↗
Referência
CVE-2007-2373
CVE-2007-2373—
SQL injection vulnerability in viewcat.php in the WF-Links (wflinks) 1.03 and earlier module for XOOPS allows remote att
23RIESGO
abrir ↗
Referência
CVE-2026-90835
CVE-2026-90835MEDIUM
michaelliao itranswarp Page Content Rendering Markdown.java Markdown.toHtml cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2019-0735
CVE-2019-0735—
An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to proper
23RIESGO
abrir ↗
Referência
CVE-2016-0093
CVE-2016-0093—
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W
23RIESGO
abrir ↗
Referência
CVE-2026-10566
CVE-2026-10566MEDIUM
FoundationAgents MetaGPT schema.py Message.check_instruct_content deserialization
33RIESGO
abrir ↗
Referência
CVE-2026-10267
CVE-2026-10267MEDIUM
janet-lang janet debug.c doframe out-of-bounds
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Windows Server 2000/2003 - Code Execution (MS08-067)
CVE-2008-4250CRITICALbajo ataqueremotewindows
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RIESGO
abrir ↗
Referência
CVE-2017-17062
CVE-2017-17062—
The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev4
23RIESGO
abrir ↗
Referência
CVE-2026-48559
CVE-2026-48559MEDIUM
Lightweight Music Server 3.76.0 Stored XSS via Media File Metadata Tags
33RIESGO
abrir ↗
Referência
CVE-2023-42793
CVE-2023-42793CRITICALbajo ataqueransomware
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RIESGO
abrir ↗
Referência
CVE-2009-4351
CVE-2009-4351—
SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magic_quotes_gpc is disabled, allows remote
23RIESGO
abrir ↗
Referência
CVE-2010-1305
CVE-2010-1305—
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot
43RIESGO
abrir ↗
Referência
CVE-2010-1312
CVE-2010-1312—
Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote
43RIESGO
abrir ↗
Referência
CVE-2018-7313
CVE-2018-7313—
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter.
28RIESGO
abrir ↗
Referência
CVE-2017-6979
CVE-2017-6979—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS
23RIESGO
abrir ↗
← anteriorpágina 677 / 880siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.