Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.426 exploits
Referência✓ VexDay Proof
MagicISO 5.4 (build239) - '.cue' Heap Overflow (PoC)
CVE-2007-2761—doslinux
Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ModuleBuilder 1.0 - 'file' Remote File Disclosure
CVE-2007-5812—webappsphp
Directory traversal vulnerability in modules/Builder/DownloadModule.php in ModuleBuilder 1.0 allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Agares phpAutoVideo 2.21 - Local/Remote File Inclusion
CVE-2007-6614—webappsphp
PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote att
23RIESGO
abrir ↗
Referência
CVE-2015-1366
CVE-2015-1366—
Cross-site scripting (XSS) vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress all
23RIESGO
abrir ↗
Referência✓ VexDay Proof
W1L3D4 philboard 1.0 - 'philboard_reply.asp' SQL Injection
CVE-2008-1939—webappsasp
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component jabode - 'id' SQL Injection
CVE-2008-7169—webappsphp
SQL injection vulnerability in Jabode horoscope extension (com_jabode) for Joomla! allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2026-90786
CVE-2026-90786MEDIUM
Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion
33RIESGO
abrir ↗
Referência
CVE-2014-9225
CVE-2014-9225—
The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symante
23RIESGO
abrir ↗
Referência
CVE-2009-3428
CVE-2009-3428—
Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted
23RIESGO
abrir ↗
Referência
CVE-2009-3428
CVE-2009-3428—
Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted
23RIESGO
abrir ↗
Referência
CVE-2015-3898
CVE-2015-3898—
Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arb
23RIESGO
abrir ↗
Referência
CVE-2010-0696
CVE-2010-0696—
Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 throug
43RIESGO
abrir ↗
Referência
CVE-2010-4056
CVE-2010-4056—
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon recei
23RIESGO
abrir ↗
Referência
CVE-2017-17593
CVE-2017-17593—
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
23RIESGO
abrir ↗
Referência
CVE-2017-17593
CVE-2017-17593—
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
23RIESGO
abrir ↗
Referência
CVE-2017-2514
CVE-2017-2514—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The
23RIESGO
abrir ↗
Referência
CVE-2011-0405
CVE-2011-0405—
Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc i
23RIESGO
abrir ↗
Referência
CVE-2012-1258
CVE-2012-1258—
cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate
23RIESGO
abrir ↗
Referência
CVE-2017-6443
CVE-2017-6443—
Cross-site scripting (XSS) vulnerability in EPSON TMNet WebConfig 1.00 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sami HTTP Server 2.0.1 - HTTP 404 Object not found Denial of Service
CVE-2007-0548—doswindows
KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number o
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Acidcat CMS 3.4.1 - Multiple Vulnerabilities
CVE-2008-1991—webappsphp
Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inje
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WonderWare SuiteLink 2.0 - Remote Denial of Service (Metasploit)
CVE-2008-2005—doswindows
The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, a
28RIESGO
abrir ↗
Referência✓ VexDay Proof
PostNuke Module PostSchedule 1.0 - 'eid' SQL Injection
CVE-2008-2012—webappsphp
SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting
CVE-2008-2023—webappsasp
Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2009-3428
CVE-2009-3428—
Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted
23RIESGO
abrir ↗
Referência
CVE-2018-19550
CVE-2018-19550—
Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit
23RIESGO
abrir ↗
Referência
CVE-2016-8023
CVE-2016-8023—
Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3
23RIESGO
abrir ↗
Referência
CVE-2017-3631
CVE-2017-3631—
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio
38RIESGO
abrir ↗
Referência✓ VexDay Proof
CliServ Web Community 0.65 - 'cl_headers' Include
CVE-2006-7068—webappsphp
PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2020-16602
CVE-2020-16602—
Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a ra
23RIESGO
abrir ↗
← anteriorpágina 699 / 881siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.