Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência✓ VexDay Proof

Vivvo Article Manager 3.2 - 'classified_path' File Inclusion

CVE-2006-4714—webappsphp

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 an

23RIESGO

abrir ↗

Referência

CVE-2026-15360

CVE-2026-15360CRITICAL

Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args

48RIESGO

abrir ↗

Referência

CVE-2026-14633

CVE-2026-14633MEDIUM

kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-34117

CVE-2026-34117CRITICAL

Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text_to_subtitles.php

48RIESGO

abrir ↗

Referência

CVE-2026-34116

CVE-2026-34116CRITICAL

Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe.php

48RIESGO

abrir ↗

Referência✓ VexDay Proof

OCE 3121/3122 Printer - 'parser.exe' Denial of Service

CVE-2006-2108—doshardware

parser.exe in Océ (OCE) 3121/3122 Printer allows remote attackers to cause a denial of service (crash or reboot) via a l

23RIESGO

abrir ↗

Referência

CVE-2026-105174

CVE-2026-105174MEDIUM

Gerapy Project Management views.py project_create path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-12211

CVE-2026-12211MEDIUM

Intelbras iNVU 7016 FT Web syslog path traversal

33RIESGO

abrir ↗

Referência

CVE-2017-20271

CVE-2017-20271HIGH

Joomla StreetGuessr Game 1.1.8 SQL Injection via catid

41RIESGO

abrir ↗

Referência

CVE-2017-20270

CVE-2017-20270HIGH

Joomla! Component Twitch Tv 1.1 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2023-54353

CVE-2023-54353HIGH

Chromacam 4.0.3.0 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2026-11503

CVE-2026-11503HIGH

Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-11500

CVE-2026-11500LOW

Weaviate Static API Key client.go validateConfig authorization

28RIESGO

abrir ↗

Referência

CVE-2026-11497

CVE-2026-11497MEDIUM

D-Link DCS-5615 Boa Webserver boa.conf least privilege violation

33RIESGO

abrir ↗

Referência

CVE-2026-58053

CVE-2026-58053CRITICAL

Gitea act_runner - Container Hardening Bypass via Workflow Container Options

48RIESGO

abrir ↗

Referência

CVE-2026-105137

CVE-2026-105137LOW

Laradock Build Process Dockerfile code download

28RIESGO

abrir ↗

Referência

CVE-2019-25761

CVE-2019-25761HIGH

Joomla! Component JoomCRM 1.1.1 SQL Injection via deal_id

41RIESGO

abrir ↗

Referência

CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

Referência

CVE-2026-58052

CVE-2026-58052MEDIUM

7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision

33RIESGO

abrir ↗

Referência

CVE-2018-14894

CVE-2018-14894—

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file

23RIESGO

abrir ↗

Referência

CVE-2007-3808

CVE-2007-3808—

SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência

CVE-2019-13235

CVE-2019-13235—

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Traffic Stats - 'referralUrl.php?offset' SQL Injection

CVE-2007-3840—webappsphp

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2026-105135

CVE-2026-105135CRITICAL

InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection

48RIESGO

abrir ↗

Referência

CVE-2018-0752

CVE-2018-0752—

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709

23RIESGO

abrir ↗

Referência

CVE-2017-1274

CVE-2017-1274—

IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated

23RIESGO

abrir ↗

Referência✓ VexDay Proof

paBugs 2.0 Beta 3 - 'main.php?cid' SQL Injection

CVE-2007-4183—webappsphp

SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência

1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting

CVE-2019-14221—webappsphp

1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.

23RIESGO

abrir ↗

Referência

CVE-2026-82183

CVE-2026-82183HIGH

OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertion

41RIESGO

abrir ↗

Referência

CVE-2017-17642

CVE-2017-17642—

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.