Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.426 exploits
Referência
CVE-2010-0319
CVE-2010-0319—
Cross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2015-7562
CVE-2015-7562—
Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP 5.2.3 - 'PHP_gd2.dll' imagepsloadfont Local Buffer Overflow (PoC)
CVE-2007-4033—doswindows
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent at
28RIESGO
abrir ↗
Referência
CVE-2008-6924
CVE-2008-6924—
Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2009-4464
CVE-2009-4464—
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2009-4684
CVE-2009-4684—
Cross-site scripting (XSS) vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script
23RIESGO
abrir ↗
Referência
CVE-2026-8385
CVE-2026-8385MEDIUM
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback
48RIESGO
abrir ↗
Referência
CVE-2026-12216
CVE-2026-12216MEDIUM
svaarala duktape duk_api_bytecode.c memory corruption
33RIESGO
abrir ↗
Referência
CVE-2010-2156
CVE-2010-2156—
ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit)
60RIESGO
abrir ↗
Referência
CVE-2026-71195
CVE-2026-71195CRITICAL
In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns th
48RIESGO
abrir ↗
Referência
CVE-2026-113741
CVE-2026-113741MEDIUM
itsourcecode Online Cake Ordering System 404.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2009-2884
CVE-2009-2884—
Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2009-3187
CVE-2009-3187—
Cross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arb
23RIESGO
abrir ↗
Referência
CVE-2021-47956
CVE-2021-47956HIGH
EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname
41RIESGO
abrir ↗
Referência
CVE-2020-37242
CVE-2020-37242HIGH
WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx
41RIESGO
abrir ↗
Referência
CVE-2026-12214
CVE-2026-12214HIGH
Qihoo 360 Total Security Nucleus Engine Monitoring Logic RpcStringBindingComposeW protection mechanism
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Seditio CMS 121 - 'pfs.php' Arbitrary File Upload
CVE-2007-4057—webappsphp
Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPAuctionSystem - Cross-Site Scripting / SQL Injection
CVE-2009-0107—webappsphp
Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2011-10010
CVE-2011-10010CRITICAL
QuickShare File Server 1.2.1 Path Traversal RCE
63RIESGO
abrir ↗
Referência
CVE-2011-10010
CVE-2011-10010CRITICAL
QuickShare File Server 1.2.1 Path Traversal RCE
63RIESGO
abrir ↗
Referência
CVE-2011-10010
CVE-2011-10010CRITICAL
QuickShare File Server 1.2.1 Path Traversal RCE
63RIESGO
abrir ↗
Referência
CVE-2011-10010
CVE-2011-10010CRITICAL
QuickShare File Server 1.2.1 Path Traversal RCE
63RIESGO
abrir ↗
Referência
CVE-2015-7714
CVE-2015-7714—
Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote adm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Online Grades 3.2.4 - Authentication Bypass
CVE-2009-0452—webappsphp
Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, a
23RIESGO
abrir ↗
Referência
CVE-2009-3202
CVE-2009-3202—
Cross-site scripting (XSS) vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote attackers to inject arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
sourdough 0.3.5 - Remote File Inclusion
CVE-2009-0456—webappsphp
PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough
23RIESGO
abrir ↗
Referência
CVE-2009-3562
CVE-2009-3562—
Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗
Referência
CVE-2017-17581
CVE-2017-17581—
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
23RIESGO
abrir ↗
Referência
CVE-2023-23059
CVE-2023-23059CRITICAL
An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions
48RIESGO
abrir ↗
Referência
CVE-2009-4523
CVE-2009-4523—
Cross-site scripting (XSS) vulnerability in index.php in Zainu 1.0 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
← anteriorpágina 722 / 881siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.