Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.899exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.463 exploits
Referência
CVE-2015-2572
CVE-2015-2572—
Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and ear
23RIESGO
abrir ↗
Referência
CVE-2026-110292
CVE-2026-110292MEDIUM
PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intent
33RIESGO
abrir ↗
Referência✓ VexDay Proof
elvin bts 1.2.0 - Multiple Vulnerabilities
CVE-2009-2129—webappsphp
Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authen
23RIESGO
abrir ↗
Referência
CVE-2013-4952
CVE-2013-4952—
SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2023-53872
CVE-2023-53872CRITICAL
Wp2Fac 1.0 OS Command Injection via send.php Endpoint
48RIESGO
abrir ↗
Referência
CVE-2022-3603
CVE-2022-3603CRITICAL
Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection
48RIESGO
abrir ↗
Referência
CVE-2012-4325
CVE-2012-4325—
Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
xweblog 2.1 - 'kategori.asp' SQL Injection
CVE-2006-5023—webappsasp
SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2012-1220
CVE-2012-1220—
Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remo
23RIESGO
abrir ↗
Referência
CVE-2012-5891
CVE-2012-5891—
Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow
23RIESGO
abrir ↗
Referência
CVE-2015-2572
CVE-2015-2572—
Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and ear
23RIESGO
abrir ↗
Referência
CVE-2015-7895
CVE-2015-7895—
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
23RIESGO
abrir ↗
Referência
CVE-2015-7895
CVE-2015-7895—
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
23RIESGO
abrir ↗
Referência✓ VexDay Proof
E-Smart Cart 1.0 - 'Product_ID' SQL Injection
CVE-2007-0092—webappsasp
SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2012-5891
CVE-2012-5891—
Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eDocStore - 'doc.php?doc_id' SQL Injection
CVE-2007-3452—webappsphp
SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2022-45707
CVE-2022-45707CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijac
48RIESGO
abrir ↗
Referência
CVE-2022-45708
CVE-2022-45708CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDel
48RIESGO
abrir ↗
Referência
CVE-2022-45710
CVE-2022-45710CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule p
48RIESGO
abrir ↗
Referência
CVE-2022-45712
CVE-2022-45712CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForwa
48RIESGO
abrir ↗
Referência
CVE-2022-45714
CVE-2022-45714CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleD
48RIESGO
abrir ↗
Referência
CVE-2022-45715
CVE-2022-45715CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRang
48RIESGO
abrir ↗
Referência
CVE-2022-45716
CVE-2022-45716CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBin
48RIESGO
abrir ↗
Referência
CVE-2022-45718
CVE-2022-45718CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAd
48RIESGO
abrir ↗
Referência
CVE-2022-45719
CVE-2022-45719CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAut
48RIESGO
abrir ↗
Referência
CVE-2022-45720
CVE-2022-45720CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters
48RIESGO
abrir ↗
Referência
CVE-2022-45706
CVE-2022-45706CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCh
48RIESGO
abrir ↗
Referência
CVE-2026-115522
CVE-2026-115522MEDIUM
Cross-Application Artifact Namespace Isolation in Google Agent Development Kit (ADK) for Python
33RIESGO
abrir ↗
Referência
CVE-2026-89000
CVE-2026-89000MEDIUM
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Run
33RIESGO
abrir ↗
Referência
CVE-2026-118276
CVE-2026-118276MEDIUM
a2ui-project a2ui Parser expression_parser.ts formatString resource consumption
33RIESGO
abrir ↗
← anteriorpágina 767 / 883siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.