Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.949exploits catalogados
40.798CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.342VulnCheck XDB 10.507Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2010-5083
CVE-2010-5083—
SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência
CVE-2025-15047
CVE-2025-15047CRITICAL
Tenda WH450 HTTP Request PPTPDClient stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2025-15047
CVE-2025-15047CRITICAL
Tenda WH450 HTTP Request PPTPDClient stack-based overflow
48RIESGO
abrir ↗
Referência
FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution
CVE-2025-25257CRITICALbajo ataquewebappsmultiple
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi
100RIESGO
abrir ↗
Referência
CVE-2023-0830
CVE-2023-0830MEDIUM
EasyNAS backup.pl system os command injection
38RIESGO
abrir ↗
Referência
CVE-2026-103330
CVE-2026-103330MEDIUM
Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass
33RIESGO
abrir ↗
Referência
CVE-2026-66748
CVE-2026-66748HIGH
Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field
41RIESGO
abrir ↗
Referência
CVE-2026-103313
CVE-2026-103313MEDIUM
BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler
33RIESGO
abrir ↗
Referência
CVE-2012-6508
CVE-2012-6508—
Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hija
23RIESGO
abrir ↗
Referência
CVE-2014-9642
CVE-2014-9642—
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows loca
23RIESGO
abrir ↗
Referência
CVE-2016-10045
CVE-2016-10045—
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman
60RIESGO
abrir ↗
Referência
CVE-2026-113488
CVE-2026-113488MEDIUM
GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute
33RIESGO
abrir ↗
Referência
CVE-2010-3486
CVE-2010-3486—
Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PeopleAggregator 1.2pre6-release-53 - Multiple Remote File Inclusions
CVE-2007-5631—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when register_globals is enabled, allow
35RIESGO
abrir ↗
Referência
CVE-2026-16210
CVE-2026-16210MEDIUM
newpanjing simpleui AjaxAdmin AJAX Endpoint admin.py self.get_action missing authentication
33RIESGO
abrir ↗
Referência✓ VexDay Proof
ECShop 2.5.0 - 'order_sn' SQL Injection
CVE-2009-1622—webappsphp
SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência
CVE-2017-14016
CVE-2017-14016—
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The applicati
43RIESGO
abrir ↗
Referência
CVE-2012-5320
CVE-2012-5320—
Cross-site request forgery (CSRF) vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2009-3313
CVE-2009-3313—
Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Referência
CVE-2017-6371
CVE-2017-6371—
Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service (service crash) via a long string
23RIESGO
abrir ↗
Referência
CVE-2017-6371
CVE-2017-6371—
Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service (service crash) via a long string
23RIESGO
abrir ↗
Referência
CVE-2010-4847
CVE-2010-4847—
SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência
CVE-2026-113487
CVE-2026-113487MEDIUM
GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute
33RIESGO
abrir ↗
Referência
CVE-2010-5060
CVE-2010-5060—
SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2010-5285
CVE-2010-5285—
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the a
23RIESGO
abrir ↗
Referência
CVE-2016-10045
CVE-2016-10045—
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman
60RIESGO
abrir ↗
Referência
CVE-2012-3294
CVE-2012-3294—
Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfe
23RIESGO
abrir ↗
Referência
CVE-2016-10045
CVE-2016-10045—
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman
60RIESGO
abrir ↗
Referência
CVE-2017-14075
CVE-2017-14075—
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must
23RIESGO
abrir ↗
Referência
CVE-2014-9642
CVE-2014-9642—
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows loca
23RIESGO
abrir ↗
← anteriorpágina 784 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.