Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.426 exploits
Referência✓ VexDay Proof
AJ HYIP ACME - 'news.php' SQL Injection
CVE-2008-2893—webappsphp
SQL injection vulnerability in news.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2010-2622
CVE-2010-2622—
SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Rankem - Authentication Bypass
CVE-2008-5589—webappsasp
SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Docebo 3.5.0.3 - 'lib.regset.php' Command Execution
CVE-2008-7154—webappsphp
Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/cla
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mega File Hosting Script 1.2 - 'url' Remote File Inclusion
CVE-2009-0966—webappsphp
PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
vsp stats processor 0.45 - 'gamestat.php?gameID' SQL Injection
CVE-2009-1224—webappsphp
SQL injection vulnerability in vsp-core/pub/themes/bismarck/gamestat.php in vsp stats processor 0.45 allows remote attac
23RIESGO
abrir ↗
Referência
CVE-2016-8807
CVE-2016-8807—
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RIESGO
abrir ↗
Referência
Multi Language Olx Clone Script - Cross-Site Scripting
CVE-2018-6845—webappsphp
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field.
23RIESGO
abrir ↗
Referência
CVE-2015-3302
CVE-2015-3302—
The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1
28RIESGO
abrir ↗
Referência
CVE-2021-42053
CVE-2021-42053—
The Unicorn framework through 0.35.3 for Django allows XSS via component.name.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ixprim CMS 1.2 - Blind SQL Injection
CVE-2006-6755—webappsphp
Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ix
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MyBloggie 2.1.6 - Multiple SQL Injections
CVE-2007-1899—webappsphp
Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities
CVE-2007-6499—webappsasp
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninsta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Prozilla Topsites 1.0 - Arbitrary Edit/Add Users
CVE-2008-1784—webappsphp
Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2
23RIESGO
abrir ↗
Referência
CVE-2012-1934
CVE-2012-1934—
SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
realm CMS 2.3 - Multiple Vulnerabilities
CVE-2008-2682—webappsphp
_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pag
23RIESGO
abrir ↗
Referência
CVE-2014-0864
CVE-2014-0864—
Multiple cross-site request forgery (CSRF) vulnerabilities in Executer in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5
23RIESGO
abrir ↗
Referência
CVE-2015-3306
CVE-2015-3306CRITICALbajo ataque
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
100RIESGO
abrir ↗
Referência✓ VexDay Proof
eLineStudio Site Composer (ESC) 2.6 - Multiple Vulnerabilities
CVE-2008-2864—webappsphp
eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct req
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Natterchat 1.12 - Database Disclosure
CVE-2008-5602—webappsasp
Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote at
23RIESGO
abrir ↗
Referência
CVE-2008-6279
CVE-2008-6279—
RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an
23RIESGO
abrir ↗
Referência✓ VexDay Proof
All Club CMS 0.0.2 - Remote Database Configuration Retrieve
CVE-2008-7069—webappsphp
All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TinyWebGallery 1.7.6 - Local File Inclusion / Remote Code Execution
CVE-2009-1911—webappsphp
Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as
23RIESGO
abrir ↗
Referência
CVE-2015-3306
CVE-2015-3306CRITICALbajo ataque
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
100RIESGO
abrir ↗
Referência
CVE-2010-0942
CVE-2010-0942—
Directory traversal vulnerability in the jVideoDirect (com_jvideodirect) component for Joomla! allows remote attackers t
38RIESGO
abrir ↗
Referência
CVE-2010-1701
CVE-2010-1701—
SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2026-40521
CVE-2026-40521HIGH
FrontAccounting < 2.4.20 Path Traversal RCE via attachment upload
41RIESGO
abrir ↗
Referência
CVE-2013-7193
CVE-2013-7193—
Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2018-10763
CVE-2018-10763—
Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2
23RIESGO
abrir ↗
Referência
CVE-2026-58460
CVE-2026-58460HIGH
react-native-receive-sharing-intent Path Traversal via _display_name
41RIESGO
abrir ↗
← anteriorpágina 724 / 881siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.