Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.780exploits catalogados
39.319CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.394Exploit-DB 24.485GitHub PoC 16.249VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
4478 exploits
Nucleicritical
WordPress Fontsy <=1.8.6 - SQL Injection
CVE-2022-4447CRITICAL
Fontsy <= 1.8.6 - Multiple Unauthenticated SQLi
63RIESGO
abrir ↗
Nucleicritical
Cryptocurrency Widgets Pack <= 1.8.1 - SQL Injection
CVE-2022-44588CRITICAL
WordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL Injection
43RIESGO
abrir ↗
Nucleicritical
PrestaShop lgcookieslaw - SQL Injection
CVE-2022-44727CRITICAL
The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcooki
43RIESGO
abrir ↗
Nucleicritical
CentOS Web Panel 7 <0.9.8.1147 - Remote Code Execution
CVE-2022-44877CRITICALbajo ataque
login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execut
100RIESGO
abrir ↗
Nucleimedium
Rukovoditel <= 3.2.1 - Cross Site Scripting
CVE-2022-44944MEDIUM
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add Announcement f
28RIESGO
abrir ↗
Nucleimedium
Rukovoditel <= 3.2.1 - Cross-Site Scripting
CVE-2022-44946MEDIUM
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add Page function
28RIESGO
abrir ↗
Nucleimedium
Rukovoditel <= 3.2.1 - Cross Site Scripting
CVE-2022-44947MEDIUM
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Highlight Row feat
28RIESGO
abrir ↗
Nucleimedium
Rukovoditel <= 3.2.1 - Cross-Site Scripting
CVE-2022-44948MEDIUM
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Entities Group fea
28RIESGO
abrir ↗
Nucleimedium
Rukovoditel <= 3.2.1 - Cross Site Scripting
CVE-2022-44949MEDIUM
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field func
28RIESGO
abrir ↗
Nucleimedium
Rukovoditel <= 3.2.1 - Cross Site Scripting
CVE-2022-44950MEDIUM
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field func
28RIESGO
abrir ↗
Nucleimedium
Rukovoditel <= 3.2.1 - Cross Site Scripting
CVE-2022-44951MEDIUM
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Form tab f
28RIESGO
abrir ↗
Nucleimedium
Rukovoditel <= 3.2.1 - Cross Site Scripting
CVE-2022-44952MEDIUM
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in /index.php?module=conf
28RIESGO
abrir ↗
Nucleimedium
WebTareas 2.4p5 - Cross-Site Scripting
CVE-2022-44957MEDIUM
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /clients/listclien
28RIESGO
abrir ↗
Nucleimedium
WBCE CMS v1.5.4 - Cross Site Scripting (Stored)
CVE-2022-45037MEDIUM
A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbi
28RIESGO
abrir ↗
Nucleimedium
WBCE CMS v1.5.4 - Cross Site Scripting (Stored)
CVE-2022-45038MEDIUM
A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute ar
28RIESGO
abrir ↗
Nucleihigh
Linx Sphere - Directory Traversal
CVE-2022-45269HIGH
A directory traversal vulnerability in the component SCS.Web.Server.SPI/1.0 of Linx Sphere LINX 7.35.ST15 allows attacke
36RIESGO
abrir ↗
Nucleihigh
Download Monitor <= 4.7.60 - Sensitive Information Exposure
CVE-2022-45354MEDIUM
WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure
60RIESGO
abrir ↗
Nucleimedium
WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery
CVE-2022-45362HIGH
WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)
48RIESGO
abrir ↗
Nucleimedium
Stock Ticker <= 3.23.2 - Cross-Site-Scripting
CVE-2022-45365HIGH
WordPress Stock Ticker Plugin <= 3.23.2 is vulnerable to Cross Site Scripting (XSS)
48RIESGO
abrir ↗
Nucleicritical
APsystems ECU-R Firmware - Command Injection
CVE-2022-45699CRITICAL
Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attack
85RIESGO
abrir ↗
Nucleicritical
WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection
CVE-2022-45805HIGH
WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection
36RIESGO
abrir ↗
Nucleicritical
LearnPress Plugin < 4.2.0 - Unauthenticated Time-Based Blind SQLi
CVE-2022-45808CRITICAL
WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection
63RIESGO
abrir ↗
Nucleihigh
WordPress PhonePe Payment Solutions <=1.0.15 - Server-Side Request Forgery
CVE-2022-45835MEDIUM
WordPress PhonePe Payment Solutions Plugin <= 1.0.15 is vulnerable to Server Side Request Forgery (SSRF)
40RIESGO
abrir ↗
Nucleihigh
WordPress Download Manager <= 3.2.59 - Reflected XSS
CVE-2022-45836HIGH
WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)
36RIESGO
abrir ↗
Nucleimedium
ILIAS eLearning <7.16 - Open Redirect
CVE-2022-45917MEDIUM
ILIAS before 7.16 has an Open Redirect.
28RIESGO
abrir ↗
Nucleicritical
KubeView <=0.1.31 - Information Disclosure
CVE-2022-45933CRITICAL
KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does n
55RIESGO
abrir ↗
Nucleicritical
WBCE CMS v1.5.4 - Remote Code Execution
CVE-2022-46020CRITICAL
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.
55RIESGO
abrir ↗
Nucleicritical
Helmet Store Showroom v1.0 - SQL Injection
CVE-2022-46071CRITICAL
There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to by
43RIESGO
abrir ↗
Nucleimedium
Helmet Store Showroom - Cross Site Scripting
CVE-2022-46073MEDIUM
Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).
28RIESGO
abrir ↗
Nucleicritical
Cacti <=1.2.22 - Remote Command Injection
CVE-2022-46169CRITICALbajo ataque
Unauthenticated Command Injection
100RIESGO
abrir ↗
← anteriorpágina 79 / 150siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.