Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.809exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.234VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.463 exploits
Referência
CVE-2024-11605
CVE-2024-11605MEDIUM
WP Publications <= 1.2 - Admin+ Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2025-6763
CVE-2025-6763CRITICAL
Comet System H3531 Web-based Management setupA.cfg missing authentication
48RIESGO
abrir ↗
Referência
CVE-2026-28515
CVE-2026-28515CRITICAL
openDCIM <= 23.04 Missing Authorization in install.php
63RIESGO
abrir ↗
Referência
CVE-2026-28515
CVE-2026-28515CRITICAL
openDCIM <= 23.04 Missing Authorization in install.php
63RIESGO
abrir ↗
Referência
CVE-2026-19998
CVE-2026-19998MEDIUM
code-projects Online Shopping System offersmail.php cross site scripting
33RIESGO
abrir ↗
Referência✓ VexDay Proof
FoT Video scripti 1.1b - 'oyun' SQL Injection
CVE-2008-4176—webappsasp
SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Java SE Runtime Environment JRE 6 Update 13 - Multiple Vulnerabilities
CVE-2009-1671—doswindows
Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Env
28RIESGO
abrir ↗
Referência
CVE-2009-3509
CVE-2009-3509—
Cross-site scripting (XSS) vulnerability in admin/admin_index.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2026-82553
CVE-2026-82553MEDIUM
sambitraj Student Management System Student Dashboard student_dashboard.php mysqli_query improper authorization
33RIESGO
abrir ↗
Referência
CVE-2009-4620
CVE-2009-4620—
SQL injection vulnerability in the Joomloc (com_joomloc) component 1.0 for Joomla allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência★ 4
Security advisory for TOTOLINK a720r buffer overflow vulnerability
CVE-2026-82539CRITICAL
TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption
48RIESGO
abrir ↗
Referência
CVE-2016-0891
CVE-2016-0891—
Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remo
23RIESGO
abrir ↗
Referência
CVE-2026-82473
CVE-2026-82473HIGH
KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints
41RIESGO
abrir ↗
Referência
CVE-2010-4791
CVE-2010-4791—
SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user
23RIESGO
abrir ↗
Referência
CVE-2010-4792
CVE-2010-4792—
Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrar
23RIESGO
abrir ↗
Referência
CVE-2026-16540
CVE-2026-16540HIGH
Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint
41RIESGO
abrir ↗
Referência
CVE-2016-0952
CVE-2016-0952—
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RIESGO
abrir ↗
Referência
CVE-2008-3125
CVE-2008-3125—
SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência
CVE-2016-8641
CVE-2016-8641MEDIUM
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary fil
33RIESGO
abrir ↗
Referência✓ VexDay Proof
DELTAScripts PHP Classifieds 7.5 - Authentication Bypass
CVE-2008-5806—webappsphp
SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MaxCMS 2.0 - '/inc/ajax.asp' SQL Injection
CVE-2009-1764—webappsasp
SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2010-0800
CVE-2010-0800—
SQL injection vulnerability in the Ossolution Team Documents Seller (aka DMS) (com_dms) component 2.5.1 for Joomla! allo
23RIESGO
abrir ↗
Referência
CVE-2010-0964
CVE-2010-0964—
SQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência
CVE-2012-5098
CVE-2012-5098—
Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2022-46966
CVE-2022-46966CRITICAL
Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.
48RIESGO
abrir ↗
Referência
CVE-2016-1000
CVE-2016-1000—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
28RIESGO
abrir ↗
Referência
CVE-2010-0964
CVE-2010-0964—
SQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência
CVE-2010-1716
CVE-2010-1716—
SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2010-4834
CVE-2010-4834—
Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allo
23RIESGO
abrir ↗
Referência
CVE-2026-15046
CVE-2026-15046MEDIUM
LitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF
33RIESGO
abrir ↗
← anteriorpágina 751 / 883siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.