Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.426 exploits
Referência✓ VexDay Proof
Social Site Generator 2.0 - 'path' Remote File Inclusion
CVE-2008-6421—webappsphp
PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attacke
23RIESGO
abrir ↗
Referência
CVE-2010-1934
CVE-2010-1934—
Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, al
23RIESGO
abrir ↗
Referência
CVE-2012-6556
CVE-2012-6556—
Multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote a
23RIESGO
abrir ↗
Referência
CVE-2018-15918
CVE-2018-15918—
An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permission
23RIESGO
abrir ↗
Referência
CVE-2016-4486
CVE-2016-4486—
The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain
23RIESGO
abrir ↗
Referência
CVE-2018-9137
CVE-2018-9137—
Open-AudIT before 2.2 has CSV Injection.
23RIESGO
abrir ↗
Referência
CVE-2024-0399
CVE-2024-0399HIGH
WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection
41RIESGO
abrir ↗
Referência
CVE-2015-2838
CVE-2015-2838—
Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote
23RIESGO
abrir ↗
Referência
CVE-2010-1935
CVE-2010-1935—
Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke Module htmltonuke 2.0alpha - 'htmltonuke.php' Remote File Inclusion
CVE-2006-0308—webappsphp
PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, modu
23RIESGO
abrir ↗
Referência
CVE-2012-10020
CVE-2012-10020CRITICAL
FoxyPress <= 0.4.2.1 - Arbitrary File Upload
63RIESGO
abrir ↗
Referência✓ VexDay Proof
PortailPHP mod_phpalbum 2.1.5 - 'chemin' Remote File Inclusion
CVE-2006-4498—webappsphp
PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows remo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
sBLOG 0.7.3 Beta - '/inc/lang.php' Local File Inclusion
CVE-2007-1801—webappsphp
Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Jobs 2.4 - 'cid' SQL Injection
CVE-2007-2370—webappsphp
SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Litespeed Web Server 3.2.3 - Source Code Disclosure
CVE-2007-5654—remotemultiple
LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Fast Click SQL 1.1.7 Lite - 'init.php' Remote File Inclusion
CVE-2008-4624—webappsphp
PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, allo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Yappa-ng 2.3.3-beta0 - 'album' Local File Inclusion
CVE-2008-4626—webappsphp
Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng)
23RIESGO
abrir ↗
Referência✓ VexDay Proof
miniBloggie 1.0 - 'del.php' Blind SQL Injection
CVE-2008-4628—webappsphp
SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Bloginator 1a - Cookie Bypass / SQL Injection
CVE-2009-1050—webappsphp
Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYou
23RIESGO
abrir ↗
Referência
CVE-2026-11875
CVE-2026-11875MEDIUM
WP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Support Ticket Access via Session Cookie Forgery
33RIESGO
abrir ↗
Referência
CVE-2026-19977
CVE-2026-19977CRITICAL
EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication
48RIESGO
abrir ↗
Referência
CVE-2026-23698
CVE-2026-23698HIGH
Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload
41RIESGO
abrir ↗
Referência
CVE-2010-4771
CVE-2010-4771—
SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2026-15375
CVE-2026-15375MEDIUM
Eleveo Call Recording Software LDAP User users_ldap.jsp improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-19970
CVE-2026-19970MEDIUM
Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Hummingbird Deployment Wizard 2008 - ActiveX File Execution(2)
CVE-2008-4728—remotewindows
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in
35RIESGO
abrir ↗
Referência
CVE-2014-4717
CVE-2014-4717—
Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordP
23RIESGO
abrir ↗
Referência
CVE-2026-15274
CVE-2026-15274MEDIUM
lo48576 fbxcel Node Header parser.rs denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-15188
CVE-2026-15188MEDIUM
manjurulhoque django-job-portal Employee Dashboard Endpoint views.py EditEmployeeProfileAPIView access control
33RIESGO
abrir ↗
Referência
CVE-2026-19969
CVE-2026-19969MEDIUM
Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow
33RIESGO
abrir ↗
← anteriorpágina 695 / 881siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.