Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.780exploits catalogados

39.319CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.394Exploit-DB 24.485GitHub PoC 16.249VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

4478 exploits

Nucleicritical

Zyxel - Authentication Bypass

CVE-2022-0342CRITICAL

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70

65RIESGO

abrir ↗

Nucleimedium

WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution

CVE-2022-0346—

Google XML Sitemap Generator < 2.0.4 - Reflected Cross-Site Scripting

18RIESGO

abrir ↗

Nucleicritical

WordPress NotificationX <2.3.9 - SQL Injection

CVE-2022-0349—

NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection

30RIESGO

abrir ↗

Nucleimedium

Microweber Cross-Site Scripting

CVE-2022-0378HIGH

Cross-site Scripting (XSS) - Reflected in microweber/microweber

36RIESGO

abrir ↗

Nucleimedium

WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting

CVE-2022-0381MEDIUM

Embed Swagger <= 1.0.0 Reflected Cross-Site Scripting

28RIESGO

abrir ↗

Nucleicritical

WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection

CVE-2022-0412—

TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection

60RIESGO

abrir ↗

Nucleihigh

Gogs <0.12.6 - Remote Command Execution

CVE-2022-0415CRITICAL

Remote Command Execution in uploading repository file in gogs/gogs

55RIESGO

abrir ↗

Nucleimedium

WordPress White Label CMS <2.2.9 - Cross-Site Scripting

CVE-2022-0422—

White Label MS < 2.2.9 - Reflected Cross-Site Scripting

18RIESGO

abrir ↗

Nucleimedium

Popup by Supsystic < 1.10.9 - Subscriber Email Addresses Disclosure

CVE-2022-0424—

Popup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses Disclosure

18RIESGO

abrir ↗

Nucleimedium

WP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Cross-Site Scripting

CVE-2022-0429—

WP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Unauthenticated Stored Cross-Site Scripting

18RIESGO

abrir ↗

Nucleimedium

Mastodon Prototype Pollution Vulnerability

CVE-2022-0432HIGH

Prototype Pollution in mastodon/mastodon

36RIESGO

abrir ↗

Nucleicritical

WordPress Page Views Count <2.4.15 - SQL Injection

CVE-2022-0434—

Page Views Count < 2.4.15 - Unauthenticated SQL Injection

23RIESGO

abrir ↗

Nucleimedium

karma-runner DOM-based Cross-Site Scripting

CVE-2022-0437MEDIUM

Cross-site Scripting (XSS) - DOM in karma-runner/karma

33RIESGO

abrir ↗

Nucleihigh

Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection

CVE-2022-0439—

Email Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection

18RIESGO

abrir ↗

Nucleicritical

MasterStudy LMS <2.7.6 - Improper Access Control

CVE-2022-0441—

MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation

60RIESGO

abrir ↗

Nucleicritical

Popup Builder Plugin - SQL Injection and Cross-Site Scripting

CVE-2022-0479—

Popup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site Scripting

30RIESGO

abrir ↗

Nucleicritical

Easy!Appointments <1.4.3 - Broken Access Control

CVE-2022-0482CRITICAL

Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

75RIESGO

abrir ↗

Nucleimedium

Ditty (formerly Ditty News Ticker) < 3.0.15 - Cross-Site Scripting

CVE-2022-0533—

Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleimedium

WordPress E2Pdf <1.16.45 - Cross-Site Scripting

CVE-2022-0535—

E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleicritical

Atlassian Jira Seraph - Authentication Bypass

CVE-2022-0540CRITICAL

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially

85RIESGO

abrir ↗

Nucleicritical

Formcraft3 <3.8.28 - Server-Side Request Forgery

CVE-2022-0591—

Formcraft3 < 3.8.28 - Unauthenticated SSRF

43RIESGO

abrir ↗

Nucleicritical

MapSVG < 6.2.20 - Unauthenticated SQLi

CVE-2022-0592—

MapSVG < 6.2.20 - Unauthenticated SQLi

23RIESGO

abrir ↗

Nucleimedium

WordPress Shareaholic <9.7.6 - Information Disclosure

CVE-2022-0594—

Shareaholic < 9.7.6 - Information Disclosure

18RIESGO

abrir ↗

Nucleimedium

WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting

CVE-2022-0595—

Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS

23RIESGO

abrir ↗

Nucleimedium

Microweber < 1.2.11 - Open Redirection

CVE-2022-0597MEDIUM

Open Redirect in microweber/microweber

28RIESGO

abrir ↗

Nucleimedium

ManageEngine ADSelfService Plus <6121 - Stored Cross-Site Scripting

CVE-2022-24681—

Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock

18RIESGO

abrir ↗

Nucleimedium

Zimbra Collaboration Suite < 8.8.15 - Improper Encoding

CVE-2022-24682MEDIUMbajo ataqueransomware

An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), a

70RIESGO

abrir ↗

Nucleihigh

Icinga Web 2 - Arbitrary File Disclosure

CVE-2022-24716HIGH

Path traversal in Icinga Web 2

78RIESGO

abrir ↗

Nucleicritical

GeoServer <1.2.2 - Remote Code Execution

CVE-2022-24816CRITICALbajo ataque

Improper Control of Generation of Code in jai-ext

100RIESGO

abrir ↗

Nucleimedium

XWiki < 12.10.11, 13.4.4 & 13.9-rc-1 - Information Disclosure

CVE-2022-24819MEDIUM

Unauthenticated user can retrieve the list of users through uorgsuggest.vm

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.