Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.793exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.218VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.463 exploits
Referência
CVE-2016-9151
Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0
23RIESGO
abrir ↗Referência
CVE-2016-9151
Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0
23RIESGO
abrir ↗Referência✓ VexDay Proof
webEdition CMS - 'we_objectID' Blind SQL Injection
SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Referência✓ VexDay Proof
CoolPlayer Portable 2.19.1 - 'Skin' Local Buffer Overflow
Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attacker
23RIESGO
abrir ↗Referência✓ VexDay Proof
microTopic 1 - 'Rating' Blind SQL Injection
SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc is disabled, allows remote attacker
23RIESGO
abrir ↗Referência
CVE-2015-4685
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain p
23RIESGO
abrir ↗Referência
CVE-2008-3749
SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbit
23RIESGO
abrir ↗Referência
CVE-2026-101878
Bitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncation
41RIESGO
abrir ↗Referência
CVE-2026-73699
FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()
41RIESGO
abrir ↗Referência
CVE-2010-0614
SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Referência
CVE-2026-90580
FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery
33RIESGO
abrir ↗Referência
CVE-2026-90510
dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key
33RIESGO
abrir ↗Referência✓ VexDay Proof
actSite 1.56 - 'news.php' Local File Inclusion
Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbi
23RIESGO
abrir ↗Referência
CVE-2010-1493
SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to e
23RIESGO
abrir ↗Referência
CVE-2008-5493
SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbit
23RIESGO
abrir ↗Referência
CVE-2026-101860
RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management
41RIESGO
abrir ↗Referência
CVE-2010-1493
SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to e
23RIESGO
abrir ↗Referência
CVE-2010-4902
Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attacke
23RIESGO
abrir ↗Referência
CVE-2010-4503
SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Referência
CVE-2009-3322
The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood o
23RIESGO
abrir ↗Referência
CVE-2026-90502
stilleshan ServerStatus Stats Generation main.cpp cross site scripting
33RIESGO
abrir ↗Referência
CVE-2010-3904
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the
91RIESGO
abrir ↗Referência
CVE-2020-26629
A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows
48RIESGO
abrir ↗Referência
CVE-2005-4416
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Referência
CVE-2026-14925
Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download
41RIESGO
abrir ↗Referência
CVE-2010-4844
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência
CVE-2010-4844
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência
CVE-2014-2043
SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows re
23RIESGO
abrir ↗Referência✓ VexDay Proof
SAPID Gallery 1.0 - 'ROOT_PATH' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.