Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2019-7276

CVE-2019-7276—

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.

60RIESGO

abrir ↗

Referência

snapd < 2.37 (Ubuntu) - 'dirty_sock' Local Privilege Escalation (2)

CVE-2019-7304HIGHlocallinux

Local privilege escalation via snapd socket

53RIESGO

abrir ↗

Referência

CVE-2014-8295

CVE-2014-8295—

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2017-11911

CVE-2017-11911—

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

35RIESGO

abrir ↗

Referência

CVE-2018-0707

CVE-2018-0707—

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could

50RIESGO

abrir ↗

Referência✓ VexDay Proof

ilchClan 1.05g - 'tid' SQL Injection

CVE-2006-0851—webappsphp

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Admbook 1.2.2 - 'x-forwarded-for' Remote Command Execution

CVE-2006-0852—webappsphp

Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2019-6545

CVE-2019-6545—

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition)

28RIESGO

abrir ↗

Referência

CVE-2018-25425

CVE-2018-25425HIGH

Yot CMS 3.3.1 SQL Injection via aid and cid Parameters

41RIESGO

abrir ↗

Referência

CVE-2026-9503

CVE-2026-9503MEDIUM

GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference

33RIESGO

abrir ↗

Referência

CVE-2026-9502

CVE-2026-9502MEDIUM

GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-9482

CVE-2026-9482HIGH

Edimax EW-7438RPn formSDHCP stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-10222

CVE-2026-10222MEDIUM

NousResearch hermes-agent config.py _sanitize_env_lines injection

33RIESGO

abrir ↗

Referência

CVE-2015-2463

CVE-2015-2463—

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

35RIESGO

abrir ↗

Referência

CVE-2013-1763

CVE-2013-1763—

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l

23RIESGO

abrir ↗

Referência

CVE-2026-10226

CVE-2026-10226MEDIUM

raisulislamg4 student_management_system_by_php delete.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10225

CVE-2026-10225MEDIUM

raisulislamg4 student_management_system_by_php Login login_check.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10221

CVE-2026-10221MEDIUM

NousResearch hermes-agent run_agent.py _compress_context injection

33RIESGO

abrir ↗

Referência

CVE-2026-42425

CVE-2026-42425HIGH

OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery

41RIESGO

abrir ↗

Referência

CVE-2017-16949

CVE-2017-16949—

An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper in

28RIESGO

abrir ↗

Referência

CVE-2026-41917

CVE-2026-41917MEDIUM

OpenKM 6.3.12 Local File Inclusion via Admin Scripting

33RIESGO

abrir ↗

Referência

CVE-2026-6816

CVE-2026-6816MEDIUM

TFA Basic Plugins - Access Bypass

33RIESGO

abrir ↗

Referência

CVE-2026-9501

CVE-2026-9501MEDIUM

GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion

33RIESGO

abrir ↗

Referência

CVE-2026-9500

CVE-2026-9500MEDIUM

GNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-9486

CVE-2026-9486MEDIUM

SourceCodester Student Grades Management System cross-site request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-9480

CVE-2026-9480HIGH

Edimax EW-7438RPn formrefresh stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2014-8440

CVE-2014-8440—

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on

60RIESGO

abrir ↗

Referência

CVE-2026-10694

CVE-2026-10694MEDIUM

SourceCodester Online Food Ordering System index.php include file inclusion

33RIESGO

abrir ↗

Referência

CVE-2014-8555

CVE-2014-8555—

Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attack

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' install Method

CVE-2008-0551—remotewindows

The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong N

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.