Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.812exploits catalogados

40.763CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.463Exploit-DB 24.489GitHub PoC 18.237VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.463 exploits

Referência

CVE-2007-5180

CVE-2007-5180—

Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Referência

CVE-2008-4142

CVE-2008-4142—

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via th

23RIESGO

abrir ↗

Referência

CVE-2018-18860

CVE-2018-18860—

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-

23RIESGO

abrir ↗

Referência

CVE-2008-4157

CVE-2008-4157—

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência

CVE-2026-4181

CVE-2026-4181CRITICAL

D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow

48RIESGO

abrir ↗

Referência

CVE-2026-4184

CVE-2026-4184CRITICAL

D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow

48RIESGO

abrir ↗

Referência

CVE-2026-4183

CVE-2026-4183CRITICAL

D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow

48RIESGO

abrir ↗

Referência✓ VexDay Proof

SiteEngine 5.x - Multiple Vulnerabilities

CVE-2008-7267—webappsphp

SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

CVE-2008-4205—webappsphp

SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência

CVE-2025-34099

CVE-2025-34099CRITICAL

VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

63RIESGO

abrir ↗

Referência

CVE-2025-34099

CVE-2025-34099CRITICAL

VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

63RIESGO

abrir ↗

Referência

CVE-2026-13146

CVE-2026-13146LOW

WP Travel < 12.0.2 - Unauthenticated Booking Payment State Tampering via IDOR

28RIESGO

abrir ↗

Referência

CVE-2010-4604

CVE-2010-4604—

Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in

23RIESGO

abrir ↗

Referência

CVE-2007-5225

CVE-2007-5225—

Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the co

23RIESGO

abrir ↗

Referência

CVE-2012-4877

CVE-2012-4877—

Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remo

23RIESGO

abrir ↗

Referência

CVE-2009-0445

CVE-2009-0445—

SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência

CVE-2009-2894

CVE-2009-2894—

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via t

23RIESGO

abrir ↗

Referência

CVE-2014-7822

CVE-2014-7822—

The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restrictio

23RIESGO

abrir ↗

Referência

CVE-2009-3420

CVE-2009-3420—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote at

23RIESGO

abrir ↗

Referência

CVE-2026-82551

CVE-2026-82551MEDIUM

Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue

33RIESGO

abrir ↗

Referência

CVE-2007-3812

CVE-2007-3812—

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência

CVE-2009-4552

CVE-2009-4552—

Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbi

23RIESGO

abrir ↗

Referência

CVE-2007-3812

CVE-2007-3812—

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5231—webappsphp

Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticate

23RIESGO

abrir ↗

Referência

CVE-2010-0720

CVE-2010-0720—

SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2024-13980

CVE-2024-13980CRITICAL

H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE

48RIESGO

abrir ↗

Referência

CVE-2024-13980

CVE-2024-13980CRITICAL

H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE

48RIESGO

abrir ↗

Referência

CVE-2024-13980

CVE-2024-13980CRITICAL

H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE

48RIESGO

abrir ↗

Referência

CVE-2024-13980

CVE-2024-13980CRITICAL

H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE

48RIESGO

abrir ↗

Referência

CVE-2010-2700

CVE-2010-2700—

Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allow

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.