Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.899exploits catalogados

40.763CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.463 exploits

Referência

CVE-2026-115255

CVE-2026-115255MEDIUM

WP Roster < 2.35 - Unauthenticated Roster Member Deletion

33RIESGO

abrir ↗

Referência

CVE-2024-6164

CVE-2024-6164CRITICAL

Filter & Grids < 2.8.33 - Unauthenticated LFI

48RIESGO

abrir ↗

Referência

CVE-2026-115225

CVE-2026-115225MEDIUM

Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups Lookup

33RIESGO

abrir ↗

Referência

CVE-2020-36897

CVE-2020-36897CRITICAL

QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Execution

48RIESGO

abrir ↗

Referência✓ VexDay Proof

iyzi Forum 1.0 Beta 3 - SQL Injection

CVE-2006-5054—webappsasp

SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2026-16735

CVE-2026-16735MEDIUM

release-it conventional-changelog Changelog File index.js writeChangelog os command injection

33RIESGO

abrir ↗

Referência

CVE-2024-52544

CVE-2024-52544CRITICAL

Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow

48RIESGO

abrir ↗

Referência

CVE-2010-4838

CVE-2010-4838—

SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users

23RIESGO

abrir ↗

Referência

CVE-2011-4569

CVE-2011-4569—

SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ZZ FlashChat 3.1 - 'help.php' Local File Inclusion

CVE-2007-5620—webappsphp

Directory traversal vulnerability in admin/inc/help.php in ZZ:FlashChat 3.1 and earlier allows remote attackers to inclu

23RIESGO

abrir ↗

Referência

CVE-2012-4425

CVE-2012-4425—

libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to

23RIESGO

abrir ↗

Referência

CVE-2012-4746

CVE-2012-4746—

Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote atta

23RIESGO

abrir ↗

Referência

CVE-2017-13867

CVE-2017-13867—

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b

23RIESGO

abrir ↗

Referência

CVE-2017-6366

CVE-2017-6366—

Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 all

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ezcms 1.2 - Blind SQL Injection / Authentication Bypass

CVE-2008-2921—webappsphp

SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Ovidentia 6.6.5 - 'item' SQL Injection

CVE-2008-4423—webappsphp

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência

CVE-2026-4182

CVE-2026-4182CRITICAL

D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow

48RIESGO

abrir ↗

Referência

CVE-2026-25873

CVE-2026-25873CRITICAL

OmniGen2-RL Reward Server Unsafe Deserialization RCE

48RIESGO

abrir ↗

Referência

CVE-2025-34096

CVE-2025-34096CRITICAL

Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp

63RIESGO

abrir ↗

Referência

CVE-2025-34096

CVE-2025-34096CRITICAL

Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp

63RIESGO

abrir ↗

Referência

CVE-2010-10013

CVE-2010-10013CRITICAL

AjaXplorer < 2.6 checkInstall.php Unauthenticated RCE

63RIESGO

abrir ↗

Referência

CVE-2010-10013

CVE-2010-10013CRITICAL

AjaXplorer < 2.6 checkInstall.php Unauthenticated RCE

63RIESGO

abrir ↗

Referência

CVE-2012-5005

CVE-2012-5005—

Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote attackers to hij

23RIESGO

abrir ↗

Referência

CVE-2014-7951

CVE-2014-7951—

Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate att

23RIESGO

abrir ↗

Referência

CVE-2014-7951

CVE-2014-7951—

Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate att

23RIESGO

abrir ↗

Referência

CVE-2026-90506

CVE-2026-90506LOW

vvbbnn00 WARP-Clash-API Save Account Job race condition

28RIESGO

abrir ↗

Referência

CVE-2016-10074

CVE-2016-10074—

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass

35RIESGO

abrir ↗

Referência

CVE-2015-7106

CVE-2015-7106—

The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial

23RIESGO

abrir ↗

Referência

CVE-2026-53365

CVE-2026-53365HIGH

vsock/virtio: fix zerocopy completion for multi-skb sends

41RIESGO

abrir ↗

Referência✓ VexDay Proof

EfesTECH Haber 5.0 - 'id' SQL Injection

CVE-2007-2662—webappsphp

SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id p

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.