Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.426 exploits
Referência
CVE-2013-4743
CVE-2013-4743—
Static HTTP Server 1.0 has a Local Overflow
23RIESGO
abrir ↗
Referência
CVE-2013-4800
CVE-2013-4800—
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve
50RIESGO
abrir ↗
Referência
CVE-2026-114384
CVE-2026-114384MEDIUM
itsourcecode Online Cake Ordering System transactionsave.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2014-3961
CVE-2014-3961—
SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allo
23RIESGO
abrir ↗
Referência
CVE-2010-1114
CVE-2010-1114—
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2010-1703
CVE-2010-1703—
Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allo
23RIESGO
abrir ↗
Referência
CVE-2014-3974
CVE-2014-3974—
Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject
23RIESGO
abrir ↗
Referência
CVE-2026-114376
CVE-2026-114376MEDIUM
leomoon-studios wiki-go API editor.go SourceHandler path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-77013
CVE-2026-77013MEDIUM
Icollect <= 1.0.0 - Unauthenticated User and Term Creation via Unrestricted Method Dispatch
33RIESGO
abrir ↗
Referência
CVE-2018-5754
CVE-2018-5754—
Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and
23RIESGO
abrir ↗
Referência
CVE-2019-6710
CVE-2019-6710—
Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.
23RIESGO
abrir ↗
Referência
CVE-2026-114375
CVE-2026-114375MEDIUM
leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversal
33RIESGO
abrir ↗
Referência✓ VexDay Proof
CJG EXPLORER PRO 3.2 - 'g_pcltar_lib_dir' Remote File Inclusion
CVE-2007-2199—webappsphp
PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vi
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Hot Links SQL-PHP 3 - 'report.php' Multiple Vulnerabilities
CVE-2008-4379—webappsphp
Cross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote at
23RIESGO
abrir ↗
Referência
CVE-2011-5166
CVE-2011-5166—
Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion
CVE-2008-4455—webappsphp
Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic_quotes_gpc
23RIESGO
abrir ↗
Referência
CVE-2016-2539
CVE-2016-2539—
Cross-site request forgery (CSRF) vulnerability in install_modules.php in ATutor before 2.2.2 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2019-19245
CVE-2019-19245—
NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginForm[use
23RIESGO
abrir ↗
Referência
CVE-2021-3294
CVE-2021-3294—
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a co
23RIESGO
abrir ↗
Referência
CVE-2022-45717
CVE-2022-45717CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName param
48RIESGO
abrir ↗
Referência
CVE-2022-45709
CVE-2022-45709CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLev
48RIESGO
abrir ↗
Referência
CVE-2017-13865
CVE-2017-13865—
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b
23RIESGO
abrir ↗
Referência
CVE-2017-2353
CVE-2017-2353—
An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Bluetooth"
23RIESGO
abrir ↗
Referência✓ VexDay Proof
QuickTalk forum 1.3 - 'lang' Local File Inclusion
CVE-2007-3505—webappsphp
Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2025-25034
CVE-2025-25034CRITICAL
SugarCRM PHP Deserialization RCE
63RIESGO
abrir ↗
Referência
CVE-2025-25034
CVE-2025-25034CRITICAL
SugarCRM PHP Deserialization RCE
63RIESGO
abrir ↗
Referência
LightCMS 1.3.4 - 'exclusive' Stored XSS
CVE-2021-3355—webappsmultiple
A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Tit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Visual FoxPro 6.0 - 'FPOLE.OCX' Arbitrary Command Execution
CVE-2007-5322—remotewindows
Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote a
28RIESGO
abrir ↗
Referência
CVE-2014-4034
CVE-2014-4034—
SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2016-2539
CVE-2016-2539—
Cross-site request forgery (CSRF) vulnerability in install_modules.php in ATutor before 2.2.2 allows remote attackers to
23RIESGO
abrir ↗
← anteriorpágina 728 / 881siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.