Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2018-0894
CVE-2018-0894—
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve
23RIESGO
abrir ↗
Referência
CVE-2018-0895
CVE-2018-0895—
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve
23RIESGO
abrir ↗
Referência
CVE-2018-10710
CVE-2018-10710—
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RIESGO
abrir ↗
Referência
CVE-2018-20219
CVE-2018-20219—
An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful authentication, the de
28RIESGO
abrir ↗
Referência
CVE-2026-11501
CVE-2026-11501MEDIUM
SourceCodester Hospitals Patient Records Management System Master.php save_patient sql injection
33RIESGO
abrir ↗
Referência
CVE-2017-1092
CVE-2017-1092—
IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system a
60RIESGO
abrir ↗
Referência
CVE-2018-0897
CVE-2018-0897—
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve
23RIESGO
abrir ↗
Referência
CVE-2016-5195
CVE-2016-5195HIGHbajo ataque
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗
Referência
CVE-2026-91752
CVE-2026-91752HIGH
GNU libextractor before 1.15 Stack Overflow via OLE2
41RIESGO
abrir ↗
Referência
CVE-2026-84059
CVE-2026-84059MEDIUM
ICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injection
33RIESGO
abrir ↗
Referência
CVE-2026-13611
CVE-2026-13611MEDIUM
KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-82909
CVE-2026-82909MEDIUM
QuantumNous new-api Revoked API Token token session expiration
33RIESGO
abrir ↗
Referência
CVE-2017-12635
CVE-2017-12635—
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB be
60RIESGO
abrir ↗
Referência
CVE-2017-12636
CVE-2017-12636—
CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include pa
60RIESGO
abrir ↗
Referência
CVE-2019-1003002
CVE-2019-1003002—
A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src
60RIESGO
abrir ↗
Referência
CVE-2016-7089
CVE-2016-7089—
WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifco
23RIESGO
abrir ↗
Referência
CVE-2017-15973
CVE-2017-15973—
Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php.
23RIESGO
abrir ↗
Referência
TeemIp IPAM < 2.4.0 - 'new_config' Command Injection (Metasploit)
CVE-2019-10863—remotephp
A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows on
28RIESGO
abrir ↗
Referência
CVE-2026-82424
CVE-2026-82424MEDIUM
PHPGurukul Student Information System student_edit1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-18897
CVE-2026-18897HIGH
UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflow
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Integramod Portal 2.x - 'functions_portal.php' Remote File Inclusion
CVE-2006-4369—webappsphp
Absolute path traversal vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier, when magic_
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TinyIdentD 2.2 - Remote Buffer Overflow
CVE-2007-2711—remotewindows
Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long s
50RIESGO
abrir ↗
Referência
CVE-2018-11510
CVE-2018-11510—
The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/
35RIESGO
abrir ↗
Referência
CVE-2026-90804
CVE-2026-90804LOW
GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow
28RIESGO
abrir ↗
Referência
CVE-2026-14659
CVE-2026-14659MEDIUM
itsourcecode Hospital Management System patientappointment.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2017-0147
CVE-2017-0147HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2026-14634
CVE-2026-14634MEDIUM
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Controller.php checkForPostRequests cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-14721
CVE-2026-14721HIGH
UTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2017-17580
CVE-2017-17580—
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.
23RIESGO
abrir ↗
Referência
CVE-2017-17594
CVE-2017-17594—
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
23RIESGO
abrir ↗
← anteriorpágina 824 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.