Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.933exploits catalogados

40.796CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.326VulnCheck XDB 10.507Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2023-5347

CVE-2023-5347CRITICAL

Unauthenticated Firmware Upgrade

48RIESGO

abrir ↗

Referência

CVE-2026-70615

CVE-2026-70615HIGH

boringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creation

41RIESGO

abrir ↗

Referência

CVE-2010-3484

CVE-2010-3484—

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2018-13441

CVE-2018-13441—

qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows atta

23RIESGO

abrir ↗

Referência

CVE-2012-2573

CVE-2012-2573—

Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrar

23RIESGO

abrir ↗

Referência

CVE-2026-108646

CVE-2026-108646MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /sys/category/importExcel

33RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPNS 1.1 - 'shownews.php?id' SQL Injection

CVE-2007-4628—webappsphp

SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Pc4Uploader 9.0 - Blind SQL Injection

CVE-2009-1742—webappsphp

code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Acoustica Mixcraft 4.2 Build 98 - 'mx4' Local Buffer Overflow

CVE-2008-3877—localwindows

Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execut

23RIESGO

abrir ↗

Referência

CVE-2009-2775

CVE-2009-2775—

SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2010-2038

CVE-2010-2038—

Cross-site scripting (XSS) vulnerability in include/tool/editing_files.php in gpEasy CMS 1.6.2 allows remote authenticat

23RIESGO

abrir ↗

Referência

CVE-2010-3484

CVE-2010-3484—

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2011-4806

CVE-2011-4806—

Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers

23RIESGO

abrir ↗

Referência

SPBAS Business Automation Software 2012 - Multiple Vulnerabilities

CVE-2013-4665—webappsphp

SPBAS Business Automation Software 2012 has CSRF.

23RIESGO

abrir ↗

Referência

CVE-2015-1364

CVE-2015-1364—

SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.

23RIESGO

abrir ↗

Referência

CVE-2016-3653

CVE-2016-3653—

Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager

23RIESGO

abrir ↗

Referência

CVE-2013-10064

CVE-2013-10064CRITICAL

ActFax 5.01 RAW Server Buffer Overflow

63RIESGO

abrir ↗

Referência

CVE-2013-10064

CVE-2013-10064CRITICAL

ActFax 5.01 RAW Server Buffer Overflow

63RIESGO

abrir ↗

Referência

CVE-2025-34110

CVE-2025-34110CRITICAL

ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure

63RIESGO

abrir ↗

Referência

CVE-2025-34110

CVE-2025-34110CRITICAL

ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure

63RIESGO

abrir ↗

Referência

CVE-2026-55391

CVE-2026-55391HIGH

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

41RIESGO

abrir ↗

Referência

CVE-2025-2907

CVE-2025-2907CRITICAL

Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update

63RIESGO

abrir ↗

Referência

CVE-2005-3686

CVE-2005-3686—

SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2026-108611

CVE-2026-108611MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /airag/word/delete Endpoint

33RIESGO

abrir ↗

Referência

CVE-2023-3048

CVE-2023-3048CRITICAL

IDOR in TMT's Lockcell

48RIESGO

abrir ↗

Referência

CVE-2026-14821

CVE-2026-14821LOW

Quiz And Survey Master < 11.1.5 - Contributor+ Arbitrary Template Deletion

28RIESGO

abrir ↗

Referência

CVE-2011-1100

CVE-2011-1100—

Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Invision Power Board 2.1 < 2.1.6 - SQL Injection (1)

CVE-2006-7071—webappsphp

SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote att

23RIESGO

abrir ↗

Referência

CVE-2010-2510

CVE-2010-2510—

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

GlobalLink 2.7.0.8 - 'glItemCom.dll SetInfo()' Heap Overflow

CVE-2007-4802—remotewindows

Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via (1) a lo

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.