Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.948exploits catalogados
40.797CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.341VulnCheck XDB 10.507Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-111151
CVE-2026-111151MEDIUM
OpenJPH through 0.32.0 Heap Out-of-Bounds Write in HTJ2K Cleanup-Pass Decoder
33RIESGO
abrir ↗
Referência
CVE-2026-58144
CVE-2026-58144MEDIUM
Cotonti Siena 0.9.26 Stored XSS via PFS Module ntitle Parameter
33RIESGO
abrir ↗
Referência
CVE-2016-1103
CVE-2016-1103—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RIESGO
abrir ↗
Referência
CVE-2016-1103
CVE-2016-1103—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RIESGO
abrir ↗
Referência
CVE-2016-1106
CVE-2016-1106—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RIESGO
abrir ↗
Referência
CVE-2014-3080
CVE-2014-3080—
Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware
23RIESGO
abrir ↗
Referência
CVE-2014-3138
CVE-2014-3138—
SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1
23RIESGO
abrir ↗
Referência
CVE-2017-0144
CVE-2017-0144HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Download-Engine 1.4.2 - 'spaw' Remote File Inclusion
CVE-2006-5291—webappsphp
PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows re
23RIESGO
abrir ↗
Referência
CVE-2011-4342
CVE-2011-4342—
PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows re
28RIESGO
abrir ↗
Referência
CVE-2026-111217
CVE-2026-111217HIGH
Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID
41RIESGO
abrir ↗
Referência
CVE-2016-1744
CVE-2016-1744—
The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary co
23RIESGO
abrir ↗
Referência
CVE-2011-4342
CVE-2011-4342—
PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows re
28RIESGO
abrir ↗
Referência
CVE-2017-20284
CVE-2017-20284HIGH
Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet
41RIESGO
abrir ↗
Referência
CVE-2017-0144
CVE-2017-0144HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2026-110774
CVE-2026-110774MEDIUM
Blinko through 1.8.8 Private Attachment Read via /api/file Route
33RIESGO
abrir ↗
Referência
CVE-2026-111215
CVE-2026-111215HIGH
Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface
41RIESGO
abrir ↗
Referência
CVE-2026-111215
CVE-2026-111215HIGH
Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface
41RIESGO
abrir ↗
Referência
CVE-2026-110772
CVE-2026-110772MEDIUM
Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update
33RIESGO
abrir ↗
Referência
CVE-2026-110771
CVE-2026-110771MEDIUM
Shopizer through 3.2.5 Authorization Bypass via Product Review customerId
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Vlog System 1.1 - SQL Injection
CVE-2008-6111—webappsphp
SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2026-111214
CVE-2026-111214HIGH
Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php
46RIESGO
abrir ↗
Referência
CVE-2017-0145
CVE-2017-0145HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2026-9583
CVE-2026-9583MEDIUM
SourceCodester CET Automated Grading System with AI Predictive Analytics SQL index.php information exposure
33RIESGO
abrir ↗
Referência
CVE-2016-2385
CVE-2016-2385—
Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER a
28RIESGO
abrir ↗
Referência
CVE-2026-7718
CVE-2026-7718MEDIUM
Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection
33RIESGO
abrir ↗
Referência
CVE-2021-47935
CVE-2021-47935HIGH
Sentry 8.2.0 Remote Code Execution via Pickle Deserialization
41RIESGO
abrir ↗
Referência
CVE-2026-29004
CVE-2026-29004HIGH
BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS
41RIESGO
abrir ↗
Referência
CVE-2026-110659
CVE-2026-110659MEDIUM
ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry
33RIESGO
abrir ↗
Referência
CVE-2026-7717
CVE-2026-7717HIGH
Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow
41RIESGO
abrir ↗
← anteriorpágina 782 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.