Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.809exploits catalogados

40.763CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.463Exploit-DB 24.489GitHub PoC 18.234VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.463 exploits

Referência✓ VexDay Proof

vsftpd 2.0.5 - 'CWD' (Authenticated) Remote Memory Consumption

CVE-2007-5962—doslinux

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 throug

28RIESGO

abrir ↗

Referência✓ VexDay Proof

NetRisk 1.9.7 - Cross-Site Scripting / SQL Injection

CVE-2008-0185—webappsphp

SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to execu

23RIESGO

abrir ↗

Referência

CVE-2011-5161

CVE-2011-5161—

Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2011-5165

CVE-2011-5165—

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem

50RIESGO

abrir ↗

Referência

CVE-2026-16300

CVE-2026-16300CRITICAL

Chama < 1.0.13 - Unauthenticated Arbitrary User Password Reset

48RIESGO

abrir ↗

Referência

CVE-2026-8259

CVE-2026-8259MEDIUM

Tenda AC6 httpd telnet os command injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Rich Textbox Control 6.0-SP6 - 'SaveFile()' Insecure Method

CVE-2008-0237—remotewindows

The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary command

28RIESGO

abrir ↗

Referência

CVE-2026-8257

CVE-2026-8257MEDIUM

WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion

33RIESGO

abrir ↗

Referência

CVE-2021-47932

CVE-2021-47932CRITICAL

WordPress TheCartPress 1.5.3.6 Privilege Escalation Unauthenticated

48RIESGO

abrir ↗

Referência

CVE-2026-16297

CVE-2026-16297MEDIUM

Clearfy < 2.4.3 - Admin+ PHP Object Injection via Settings Import

33RIESGO

abrir ↗

Referência

CVE-2026-86262

CVE-2026-86262MEDIUM

sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization

33RIESGO

abrir ↗

Referência

CVE-2009-5019

CVE-2009-5019—

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote at

23RIESGO

abrir ↗

Referência

CVE-2010-4359

CVE-2010-4359—

SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência

CVE-2010-3601

CVE-2010-3601—

SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2010-4398

CVE-2010-4398HIGHbajo ataque

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Wi

71RIESGO

abrir ↗

Referência

CVE-2010-3602

CVE-2010-3602—

Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers t

23RIESGO

abrir ↗

Referência

CVE-2010-3602

CVE-2010-3602—

Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers t

23RIESGO

abrir ↗

Referência

CVE-2010-4398

CVE-2010-4398HIGHbajo ataque

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Wi

71RIESGO

abrir ↗

Referência

CVE-2026-14839

CVE-2026-14839HIGH

Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure

41RIESGO

abrir ↗

Referência✓ VexDay Proof

minimal Gallery 0.8 - Remote File Disclosure

CVE-2008-0260—webappsphp

minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to php_info.php, wh

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Agares phpAutoVideo 2.21 - 'articlecat' SQL Injection (1)

CVE-2008-0262—webappsphp

SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2013-5977

CVE-2013-5977—

Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordP

23RIESGO

abrir ↗

Referência

CVE-2016-4204

CVE-2016-4204—

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro

28RIESGO

abrir ↗

Referência

CVE-2016-4206

CVE-2016-4206—

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro

28RIESGO

abrir ↗

Referência

CVE-2026-7238

CVE-2026-7238MEDIUM

code-projects Online Music Site AdminUpdateAlbum.php unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-7237

CVE-2026-7237MEDIUM

AgiFlow scaffold-mcp write-to-file Tool index.ts path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-7235

CVE-2026-7235MEDIUM

ErlichLiu claude-agent-sdk-master route.ts path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-7234

CVE-2026-7234MEDIUM

BrowserOperator browser-operator-core server.js startsWith path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-7233

CVE-2026-7233MEDIUM

Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-bounds

33RIESGO

abrir ↗

Referência

CVE-2026-7226

CVE-2026-7226MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php login2 sql injection

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.