Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.933exploits catalogados
40.796CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.326VulnCheck XDB 10.507Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2010-1600
CVE-2010-1600—
SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2014-4872
CVE-2014-4872—
BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbit
60RIESGO
abrir ↗
Referência
CVE-2010-1472
CVE-2010-1472—
Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attac
43RIESGO
abrir ↗
Referência
CVE-2026-18819
CVE-2026-18819MEDIUM
RackTables cross-site request forgery
33RIESGO
abrir ↗
Referência
CVE-2010-1656
CVE-2010-1656—
SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote attackers to execute a
23RIESGO
abrir ↗
Referência
CVE-2026-14770
CVE-2026-14770MEDIUM
SourceCodester Class and Exam Timetabling System edit_room.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-10712
CVE-2018-10712—
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RIESGO
abrir ↗
Referência
CVE-2010-4983
CVE-2010-4983—
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2026-14731
CVE-2026-14731MEDIUM
itsourcecode Hospital Management System patientreport.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14701
CVE-2026-14701MEDIUM
code-projects Internship Management System Password Change Endpoint change_password.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-4992
CVE-2026-4992MEDIUM
wandb OpenUI HTMLAnnotator server.py get_share HTML injection
33RIESGO
abrir ↗
Referência
CVE-2026-4988
CVE-2026-4988MEDIUM
Open5GS CCA Message smf_s6b denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-4976
CVE-2026-4976HIGH
Totolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-4975
CVE-2026-4975HIGH
Tenda AC15 POST Request setcfm formSetCfm memory corruption
41RIESGO
abrir ↗
Referência
CVE-2026-4974
CVE-2026-4974HIGH
Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption
41RIESGO
abrir ↗
Referência
CVE-2026-14698
CVE-2026-14698MEDIUM
SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2014-3544
CVE-2014-3544—
Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before
23RIESGO
abrir ↗
Referência
CVE-2014-5276
CVE-2014-5276—
Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated u
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Globsy 1.0 - 'file' Remote File Disclosure
CVE-2008-0905—webappsphp
Directory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via a
23RIESGO
abrir ↗
Referência
CVE-2026-11581
CVE-2026-11581MEDIUM
Kali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field Caption
33RIESGO
abrir ↗
Referência
CVE-2014-3631
CVE-2014-3631—
The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16
23RIESGO
abrir ↗
Referência
CVE-2016-7255
CVE-2016-7255HIGHbajo ataqueransomware
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
93RIESGO
abrir ↗
Referência
CVE-2018-11646
CVE-2018-11646—
webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFavicon
50RIESGO
abrir ↗
Referência
CVE-2026-8086
CVE-2026-8086MEDIUM
OSGeo gdal SWapi.c SWnentries heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-8084
CVE-2026-8084MEDIUM
OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-13534
CVE-2026-13534LOW
CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization
28RIESGO
abrir ↗
Referência
CVE-2026-8084
CVE-2026-8084MEDIUM
OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-42284
CVE-2026-42284HIGH
GitPython: Unsafe option check validates multi_options before shlex.split transforms it
41RIESGO
abrir ↗
Referência
CVE-2026-8083
CVE-2026-8083MEDIUM
SourceCodester Pharmacy Sales and Inventory System ajax.php save_user sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke Module Docum - 'artid' SQL Injection
CVE-2008-0906—webappsphp
SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
← anteriorpágina 780 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.