Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.426 exploits
Referência✓ VexDay Proof
Adobe Reader 8.1.4/9.1 - 'GetAnnots()' Remote Code Execution
CVE-2009-1492—remotelinux
The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote
28RIESGO
abrir ↗
Referência
CVE-2010-5000
CVE-2010-5000—
SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2014-10038
CVE-2014-10038—
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
Sanitized XenForo write-up and proof of concept for CVE-2026-73320.
CVE-2026-73320MEDIUM
XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint
33RIESGO
abrir ↗
Referência
CVE-2023-22518
CVE-2023-22518CRITICALbajo ataqueransomware
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz
100RIESGO
abrir ↗
Referência
CVE-2021-1498
CVE-2021-1498CRITICALbajo ataque
Cisco HyperFlex HX Command Injection Vulnerabilities
100RIESGO
abrir ↗
Referência✓ VexDay Proof
SimpleNews 1.0.0 FINAL - 'print.php?news_id' SQL Injection
CVE-2007-2598—webappsphp
SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Flat PHP Board 1.2 - Multiple Vulnerabilities
CVE-2007-6395—webappsphp
Flat PHP Board 1.2 and earlier stores sensitive information under the web root with insufficient access control, which a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DevelopItEasy Membership System 1.3 - Authentication Bypass
CVE-2008-5054—webappsphp
Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mini Web Calendar 1.2 - File Disclosure / Cross-Site Scripting
CVE-2008-5062—webappsphp
Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read ar
23RIESGO
abrir ↗
Referência
CVE-2008-5064
CVE-2008-5064—
SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Yoxel 1.23beta - 'itpm_estimate.php' Remote Code Execution
CVE-2008-5071—webappsphp
Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated us
23RIESGO
abrir ↗
Referência
CVE-2014-5201
CVE-2014-5201—
SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Jamit Job Board 3.x - Blind SQL Injection
CVE-2008-5295—webappsphp
SQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ABC estore 3.0 - 'cat_id' Blind SQL Injection
CVE-2007-4627—webappsphp
SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2013-5639
CVE-2013-5639—
Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VideoGirls BiZ - Blind SQL Injection
CVE-2008-5292—webappsphp
SQL injection vulnerability in view_snaps.php in VideoGirls BiZ allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Hexamail Server 3.0.0.001 - 'pop3' Remote Overflow (PoC)
CVE-2007-4646—doswindows
Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of servi
28RIESGO
abrir ↗
Referência✓ VexDay Proof
No-IP DUC 2.1.7 - Remote Code Execution
CVE-2008-5297—remotelinux
Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted respon
28RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module GesGaleri - SQL Injection
CVE-2008-5321—webappsphp
SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-4540
CVE-2009-4540—
SQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2013-5961
CVE-2013-5961—
Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2021-44228
CVE-2021-44228CRITICALbajo ataqueransomware
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗
Referência
CVE-2026-86212
CVE-2026-86212MEDIUM
Open5GS AMF/MME improper authorization
33RIESGO
abrir ↗
Referência✓ VexDay Proof
EDraw Office Viewer Component - Unsafe Method
CVE-2007-3168—remotewindows
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions befo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Link Request Contact Form 3.4 - Remote Code Execution
CVE-2007-3199—webappsphp
Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AuraCMS 1.5rc - Multiple SQL Injections
CVE-2007-4804—webappsphp
Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IDM-OS 1.0 - 'Filename' File Disclosure
CVE-2008-0431—webappsphp
Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Seagull 0.6.3 - 'files' Remote File Disclosure
CVE-2008-0465—webappsphp
Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Web Wiz Rich Text Editor 4.0 - Multiple Vulnerabilities
CVE-2008-0466—webappsasp
Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02,
23RIESGO
abrir ↗
← anteriorpágina 711 / 881siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.