Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.039exploits catalogados
39.796CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.790Exploit-DB 24.487GitHub PoC 16.910VulnCheck XDB 9820Nuclei 4504Metasploit 3528✓ solo verificadosrecientespopularesriesgo
25.790 exploits
Referência
CVE-2026-16083
CVE-2026-16083MEDIUM
Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replay
33RIESGO
abrir ↗
Referência
CVE-2026-16082
CVE-2026-16082MEDIUM
Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctou
33RIESGO
abrir ↗
Referência
CVE-2026-16081
CVE-2026-16081MEDIUM
Sipeed PicoClaw auth.go cross-site request forgery
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Trend Micro Internet Security Pro 2009 - Priviliege Escalation
CVE-2009-0686—localwindows
The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Securit
23RIESGO
abrir ↗
Referência
CVE-2026-16077
CVE-2026-16077MEDIUM
AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link following
33RIESGO
abrir ↗
Referência
CVE-2009-2400
CVE-2009-2400—
SQL injection vulnerability in the PHP (com_php) component for Joomla! allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2009-3343
CVE-2009-3343—
SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência
CVE-2026-110746
CVE-2026-110746HIGH
CVE-2026-110746
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Ajax File Browser 3b - 'settings.inc.php?approot' Remote File Inclusion
CVE-2007-4921—webappsphp
PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attacker
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Peachtree Accounting 2004 - 'PAWWeb11.ocx' ActiveX Insecure Method
CVE-2008-4699—remotewindows
Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Vbgooglemap Hotspot Edition 1.0.3 - SQL Injection
CVE-2008-4706—webappsphp
SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
YourFreeWorld Classifieds Hosting - SQL Injection
CVE-2008-4884—webappsphp
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2013-0722
CVE-2013-0722—
Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow loc
23RIESGO
abrir ↗
Referência
CVE-2016-3325
CVE-2016-3325—
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted w
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Windows - '.chm' Denial of Service (HTML Compiled)
CVE-2009-0119—doswindows
Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and
35RIESGO
abrir ↗
Referência
CVE-2018-4233
CVE-2018-4233HIGH
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud
68RIESGO
abrir ↗
Referência
CVE-2018-8831
CVE-2018-8831—
A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/s
35RIESGO
abrir ↗
Referência
CVE-2016-5312
CVE-2016-5312—
Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote au
35RIESGO
abrir ↗
Referência
CVE-2017-11810
CVE-2017-11810—
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Window
35RIESGO
abrir ↗
Referência✓ VexDay Proof
212Cafe Board 0.07 - 'qID' SQL Injection
CVE-2008-4713—webappsphp
SQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2024-9441
CVE-2024-9441CRITICAL
Linear eMerge e3-Series Forgot Password Command Injection
60RIESGO
abrir ↗
Referência
CVE-2018-4233
CVE-2018-4233HIGH
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud
68RIESGO
abrir ↗
Referência
CVE-2022-36267
CVE-2022-36267—
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerabilit
35RIESGO
abrir ↗
Referência✓ VexDay Proof
MyioSoft Ajax Portal 3.0 - 'page' SQL Injection
CVE-2009-1509—webappsphp
SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mini-stream RM-MP3 Converter 3.0.0.7 - '.asx' Local Buffer Overflow
CVE-2009-1645—localwindows
Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
vbzoom 1.x - 'forum.php?MainID' SQL Injection
CVE-2006-3142—webappsphp
SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência
CVE-2009-3361
CVE-2009-3361—
SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2009-3419
CVE-2009-3419—
SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2012-2614
CVE-2012-2614—
Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a d
23RIESGO
abrir ↗
Referência
CVE-2011-4453
CVE-2011-4453—
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra
50RIESGO
abrir ↗
← anteriorpágina 75 / 860siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.