Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.899exploits catalogados

40.763CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.463 exploits

Referência

CVE-2008-6890

CVE-2008-6890—

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2014-10020

CVE-2014-10020—

SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência

CVE-2009-4809

CVE-2009-4809—

Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2014-10023

CVE-2014-10023—

Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL comman

23RIESGO

abrir ↗

Referência

CVE-2010-4866

CVE-2010-4866—

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component jokes 1.0 - 'cat' SQL Injection

CVE-2008-0519—webappsphp

SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo and Joomla! allows remo

23RIESGO

abrir ↗

Referência

CVE-2026-31431

CVE-2026-31431HIGHbajo ataque

crypto: algif_aead - Revert to operating out-of-place

100RIESGO

abrir ↗

Referência

CVE-2026-34429

CVE-2026-34429MEDIUM

Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename

33RIESGO

abrir ↗

Referência

CVE-2026-6649

CVE-2026-6649MEDIUM

Qibo CMS headers server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-6648

CVE-2026-6648MEDIUM

Qibo CMS Internal Message cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-6636

CVE-2026-6636MEDIUM

p2r3 convert API buildCache.js Bun.serve path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-6635

CVE-2026-6635MEDIUM

rowboatlabs rowboat tools_webhook app.py tool_call improper authentication

33RIESGO

abrir ↗

Referência

CVE-2026-6634

CVE-2026-6634MEDIUM

usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-6799

CVE-2026-6799MEDIUM

Comfast CF-N1-S Endpoint mbox-config command injection

33RIESGO

abrir ↗

Referência

CVE-2026-6745

CVE-2026-6745MEDIUM

Bagisto Custom Scripts cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-6744

CVE-2026-6744MEDIUM

Bagisto Downloadable Link copy server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-6743

CVE-2026-6743MEDIUM

WebSystems WebTOTUM Calendar cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2019-25714

CVE-2019-25714CRITICAL

Seeyon Office Anywhere (OA) A8 Unauthenticated Arbitrary File Write via htmlofficeservlet

48RIESGO

abrir ↗

Referência

CVE-2026-12393

CVE-2026-12393MEDIUM

WPS Bookings for WooCommerce < 3.11.7 - Subscriber+ Arbitrary Booking Order Cancellation via IDOR

33RIESGO

abrir ↗

Referência

CVE-2026-63082

CVE-2026-63082MEDIUM

Perfect Support Ticketing System 1.7 Broken Access Control via Agent Assignment

33RIESGO

abrir ↗

Referência

CVE-2026-6662

CVE-2026-6662MEDIUM

ericc-ch copilot-api Token Endpoint server.ts cors cross-domain policy

33RIESGO

abrir ↗

Referência

CVE-2026-6633

CVE-2026-6633MEDIUM

Yifang CMS Extended Management L_rbac_admin.php store cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-6632

CVE-2026-6632HIGH

Tenda F451 httpd SafeClientFilter fromSafeClientFilter buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6631

CVE-2026-6631HIGH

Tenda F451 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6630

CVE-2026-6630HIGH

Tenda F451 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2019-25714

CVE-2019-25714CRITICAL

Seeyon Office Anywhere (OA) A8 Unauthenticated Arbitrary File Write via htmlofficeservlet

48RIESGO

abrir ↗

Referência

CVE-2012-1260

CVE-2012-1260—

Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An

23RIESGO

abrir ↗

Referência

CVE-2026-11966

CVE-2026-11966MEDIUM

User Registration & Membership < 5.2.3 - Unauthenticated Limited User Deletion via Stripe Subscription Handler

33RIESGO

abrir ↗

Referência✓ VexDay Proof

POWERGAP 2003 - 's0x.php' Remote File Inclusion

CVE-2006-4236—webappsphp

Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via

28RIESGO

abrir ↗

Referência

CVE-2009-4860

CVE-2009-4860—

SQL injection vulnerability in demo.php in Typing Pal 1.0 and earlier allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.