Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.426 exploits
Referência
CVE-2010-4615
Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Referência
CVE-2007-5649
Cross-site scripting (XSS) vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote att
23RIESGO
abrir ↗Referência
CVE-2008-4601
Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbi
23RIESGO
abrir ↗Referência✓ VexDay Proof
Joomla! Component actualite 1.0 - 'id' SQL Injection
SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Referência✓ VexDay Proof
Joomla! Component ds-syndicate - 'feed_id' SQL Injection
SQL injection vulnerability in the DS-Syndicate (com_ds-syndicate) component 1.1.1 for Joomla allows remote attackers to
23RIESGO
abrir ↗Referência
CVE-2026-11875
WP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Support Ticket Access via Session Cookie Forgery
33RIESGO
abrir ↗Referência
CVE-2026-19977
EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication
48RIESGO
abrir ↗Referência
CVE-2026-23698
Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload
41RIESGO
abrir ↗Referência
CVE-2010-4771
SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Referência
CVE-2026-15375
Eleveo Call Recording Software LDAP User users_ldap.jsp improper authorization
33RIESGO
abrir ↗Referência
CVE-2026-19970
Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow
33RIESGO
abrir ↗Referência✓ VexDay Proof
Hummingbird Deployment Wizard 2008 - ActiveX File Execution(2)
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in
35RIESGO
abrir ↗Referência
CVE-2014-4717
Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordP
23RIESGO
abrir ↗Referência
CVE-2026-15188
manjurulhoque django-job-portal Employee Dashboard Endpoint views.py EditEmployeeProfileAPIView access control
33RIESGO
abrir ↗Referência
CVE-2026-19969
Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow
33RIESGO
abrir ↗Referência
CVE-2026-58473
Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settings
48RIESGO
abrir ↗Referência✓ VexDay Proof
RPG.Board 0.0.8Beta2 - 'showtopic' SQL Injection
SQL injection vulnerability in index.php in RPG.Board 0.8 Beta2 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
KVIrc 3.4.0 - Virgo Remote Format String (PoC)
Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC UR
23RIESGO
abrir ↗Referência✓ VexDay Proof
db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laborato
23RIESGO
abrir ↗Referência
CVE-2010-1946
Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_globals is enabled,
23RIESGO
abrir ↗Referência
CVE-2026-15134
CodeAstro Simple Online Leave Management System index.php sql injection
33RIESGO
abrir ↗Referência
Sanitized XenForo write-up and proof of concept for CVE-2026-73316.
XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider
41RIESGO
abrir ↗Referência
Sanitized XenForo write-up and proof of concept for CVE-2026-73315.
XenForo < 2.3.13 SSRF via PayPal REST Webhook Handler
41RIESGO
abrir ↗Referência✓ VexDay Proof
RunCMS 1.5.2 - 'debug_show.php' SQL Injection
The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file existe
23RIESGO
abrir ↗Referência✓ VexDay Proof
PMECMS 1.0 - config[pathMod] Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
PHPNews 0.93 - 'format_menue' Remote File Inclusion
PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote att
35RIESGO
abrir ↗Referência✓ VexDay Proof
Falt4 CMS rc4 10.9.2007 - Multiple Vulnerabilities
SQL injection vulnerability in (1) index.php, and possibly (2) admin/index.php, in Falt4Extreme RC4 10.9.2007 allows rem
23RIESGO
abrir ↗Referência✓ VexDay Proof
FTP Now 2.6 Server - Response Remote Crash (PoC)
Heap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to caus
23RIESGO
abrir ↗Referência✓ VexDay Proof
Microsoft GDI Plugin - '.png' Infinite Loop Denial of Service (PoC)
GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file tha
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.