Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.899exploits catalogados

40.763CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.463 exploits

Referência

CVE-2009-4682

CVE-2009-4682—

Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web sc

23RIESGO

abrir ↗

Referência

CVE-2015-8103

CVE-2015-8103—

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co

60RIESGO

abrir ↗

Referência

CVE-2017-17619

CVE-2017-17619—

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.

23RIESGO

abrir ↗

Referência

CVE-2010-2358

CVE-2010-2358—

PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_quotes_gpc is

23RIESGO

abrir ↗

Referência

CVE-2016-8972

CVE-2016-8972—

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the

23RIESGO

abrir ↗

Referência

CVE-2013-10070

CVE-2013-10070CRITICAL

PHP-Charts v1.0 PHP Code Execution

63RIESGO

abrir ↗

Referência

CVE-2013-10070

CVE-2013-10070CRITICAL

PHP-Charts v1.0 PHP Code Execution

63RIESGO

abrir ↗

Referência

CVE-2013-10070

CVE-2013-10070CRITICAL

PHP-Charts v1.0 PHP Code Execution

63RIESGO

abrir ↗

Referência

CVE-2026-108882

CVE-2026-108882MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser

33RIESGO

abrir ↗

Referência

CVE-2012-10038

CVE-2012-10038CRITICAL

Auxilium RateMyPet Arbitrary File Upload RCE

63RIESGO

abrir ↗

Referência

CVE-2018-10828

CVE-2018-10828—

An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and wri

23RIESGO

abrir ↗

Referência

CVE-2024-58393

CVE-2024-58393HIGH

i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php

41RIESGO

abrir ↗

Referência

CVE-2026-109188

CVE-2026-109188MEDIUM

jshERP through 3.6 Missing Authorization in Master Data Add and Import Endpoints

33RIESGO

abrir ↗

Referência

CVE-2025-34089

CVE-2025-34089CRITICAL

Remote for Mac Unauthenticated Remote Code Execution via AppleScript Injection

63RIESGO

abrir ↗

Referência

CVE-2025-34089

CVE-2025-34089CRITICAL

Remote for Mac Unauthenticated Remote Code Execution via AppleScript Injection

63RIESGO

abrir ↗

Referência

CVE-2012-10052

CVE-2012-10052CRITICAL

EGallery 1.2 Arbitrary PHP File Upload

63RIESGO

abrir ↗

Referência

CVE-2012-10052

CVE-2012-10052CRITICAL

EGallery 1.2 Arbitrary PHP File Upload

63RIESGO

abrir ↗

Referência

CVE-2012-10052

CVE-2012-10052CRITICAL

EGallery 1.2 Arbitrary PHP File Upload

63RIESGO

abrir ↗

Referência

CVE-2017-1000366

CVE-2017-1000366—

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causin

23RIESGO

abrir ↗

Referência

CVE-2025-34150

CVE-2025-34150CRITICAL

Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection

48RIESGO

abrir ↗

Referência

CVE-2026-16992

CVE-2026-16992MEDIUM

Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication

33RIESGO

abrir ↗

Referência✓ VexDay Proof

blogme 3.0 - Cross-Site Scripting / Authentication Bypass

CVE-2006-5976—webappsasp

Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component NeoRecruit 1.4 - 'id' SQL Injection

CVE-2007-4506—webappsphp

SQL injection vulnerability in index.php in the NeoRecruit component (com_neorecruit) 1.4 and earlier for Joomla! allows

23RIESGO

abrir ↗

Referência

CVE-2017-17636

CVE-2017-17636—

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-8275

CVE-2026-8275MEDIUM

bettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion

33RIESGO

abrir ↗

Referência

CVE-2015-6810

CVE-2015-6810—

Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB,

23RIESGO

abrir ↗

Referência

CVE-2014-8347

CVE-2014-8347—

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 a

23RIESGO

abrir ↗

Referência

CVE-2010-2460

CVE-2010-2460—

SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS) 1 allows remote attackers

23RIESGO

abrir ↗

Referência

CVE-2011-5185

CVE-2011-5185—

Cross-site scripting (XSS) vulnerability in video_comments.php in Online Subtitles Workshop before 2.0 rev 131 allows re

23RIESGO

abrir ↗

Referência★ 302

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

CVE-2025-38352HIGHbajo ataque

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

71RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.