Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.899exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.463 exploits
Referência
CVE-2010-5060
CVE-2010-5060—
SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2010-5285
CVE-2010-5285—
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the a
23RIESGO
abrir ↗
Referência
CVE-2016-10045
CVE-2016-10045—
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman
60RIESGO
abrir ↗
Referência
CVE-2012-3294
CVE-2012-3294—
Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfe
23RIESGO
abrir ↗
Referência
CVE-2016-10045
CVE-2016-10045—
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman
60RIESGO
abrir ↗
Referência
CVE-2017-14075
CVE-2017-14075—
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must
23RIESGO
abrir ↗
Referência
CVE-2014-9642
CVE-2014-9642—
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows loca
23RIESGO
abrir ↗
Referência
CVE-2016-7660
CVE-2016-7660—
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO
23RIESGO
abrir ↗
Referência
CVE-2026-110506
CVE-2026-110506MEDIUM
Page Builder by SiteOrigin < 2.38.0 - Contributor+ Stored XSS via panels_info.class
33RIESGO
abrir ↗
Referência
CVE-2015-2572
CVE-2015-2572—
Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and ear
23RIESGO
abrir ↗
Referência
CVE-2026-110292
CVE-2026-110292MEDIUM
PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intent
33RIESGO
abrir ↗
Referência✓ VexDay Proof
elvin bts 1.2.0 - Multiple Vulnerabilities
CVE-2009-2129—webappsphp
Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authen
23RIESGO
abrir ↗
Referência
CVE-2013-4952
CVE-2013-4952—
SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2023-53872
CVE-2023-53872CRITICAL
Wp2Fac 1.0 OS Command Injection via send.php Endpoint
48RIESGO
abrir ↗
Referência
CVE-2022-3603
CVE-2022-3603CRITICAL
Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection
48RIESGO
abrir ↗
Referência
CVE-2012-4325
CVE-2012-4325—
Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
xweblog 2.1 - 'kategori.asp' SQL Injection
CVE-2006-5023—webappsasp
SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2012-1220
CVE-2012-1220—
Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remo
23RIESGO
abrir ↗
Referência
CVE-2012-5891
CVE-2012-5891—
Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow
23RIESGO
abrir ↗
Referência
CVE-2015-2572
CVE-2015-2572—
Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and ear
23RIESGO
abrir ↗
Referência
CVE-2015-7895
CVE-2015-7895—
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
23RIESGO
abrir ↗
Referência
CVE-2015-7895
CVE-2015-7895—
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
23RIESGO
abrir ↗
Referência✓ VexDay Proof
E-Smart Cart 1.0 - 'Product_ID' SQL Injection
CVE-2007-0092—webappsasp
SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2012-5891
CVE-2012-5891—
Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eDocStore - 'doc.php?doc_id' SQL Injection
CVE-2007-3452—webappsphp
SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2022-45707
CVE-2022-45707CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijac
48RIESGO
abrir ↗
Referência
CVE-2022-45708
CVE-2022-45708CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDel
48RIESGO
abrir ↗
Referência
CVE-2022-45710
CVE-2022-45710CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule p
48RIESGO
abrir ↗
Referência
CVE-2022-45712
CVE-2022-45712CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForwa
48RIESGO
abrir ↗
Referência
CVE-2022-45714
CVE-2022-45714CRITICAL
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleD
48RIESGO
abrir ↗
← anteriorpágina 772 / 883siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.