Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2015-7047
CVE-2015-7047—
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
Referência
CVE-2015-7047
CVE-2015-7047—
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
Referência
CVE-2025-15671
CVE-2025-15671MEDIUM
Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-76996
CVE-2026-76996MEDIUM
SourceCodester Simple Online Food Ordering System view_order.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-62382
CVE-2026-62382MEDIUM
PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison
48RIESGO
abrir ↗
Referência
CVE-2026-16962
CVE-2026-16962MEDIUM
Tamara Checkout <= 1.9.9.20 - Unauthenticated Order Status Manipulation
33RIESGO
abrir ↗
Referência
CVE-2015-6827
CVE-2015-6827—
Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentica
23RIESGO
abrir ↗
Referência
CVE-2026-77000
CVE-2026-77000CRITICAL
WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow
48RIESGO
abrir ↗
Referência
CVE-2026-19221
CVE-2026-19221HIGH
Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite
41RIESGO
abrir ↗
Referência
CVE-2026-78167
CVE-2026-78167CRITICAL
EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication
48RIESGO
abrir ↗
Referência
CVE-2026-19093
CVE-2026-19093MEDIUM
Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path
33RIESGO
abrir ↗
Referência
CVE-2018-15139
CVE-2018-15139—
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote
28RIESGO
abrir ↗
Referência
CVE-2016-0953
CVE-2016-0953—
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RIESGO
abrir ↗
Referência
CVE-2017-0147
CVE-2017-0147HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2026-15150
CVE-2026-15150MEDIUM
myCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED
33RIESGO
abrir ↗
Referência
CVE-2026-16616
CVE-2026-16616HIGH
Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal
41RIESGO
abrir ↗
Referência
CVE-2026-77025
CVE-2026-77025MEDIUM
itsourcecode Hospital Management System viewappointmentpending.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-19041
CVE-2018-19041—
The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SAPID Shop 1.2 - 'ROOT_PATH' Remote File Inclusion
CVE-2006-4062—webappsphp
PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier a
23RIESGO
abrir ↗
Referência
CVE-2021-22205
CVE-2021-22205CRITICALbajo ataqueransomware
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RIESGO
abrir ↗
Referência
CVE-2021-22205
CVE-2021-22205CRITICALbajo ataqueransomware
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RIESGO
abrir ↗
Referência
CVE-2017-13772
CVE-2017-13772—
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated
35RIESGO
abrir ↗
Referência✓ VexDay Proof
ACDSee 9.0 - '.xpm' Local Buffer Overflow
CVE-2007-2193—localwindows
Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build
50RIESGO
abrir ↗
Referência✓ VexDay Proof
XnView 1.90.3 - '.xpm' Local Buffer Overflow
CVE-2007-2194—localwindows
Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a craft
28RIESGO
abrir ↗
Referência
CVE-2021-22911
CVE-2021-22911—
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti
60RIESGO
abrir ↗
Referência
CVE-2018-6481
CVE-2018-6481—
A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to exe
28RIESGO
abrir ↗
Referência
CVE-2019-25756
CVE-2019-25756HIGH
Joomla! Component vAccount 2.0.2 SQL Injection via vaccount-dashboard
41RIESGO
abrir ↗
Referência
CVE-2017-0288
CVE-2017-0288—
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT
23RIESGO
abrir ↗
Referência
CVE-2018-5726
CVE-2018-5726—
MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request,
28RIESGO
abrir ↗
Referência
CVE-2022-0847
CVE-2022-0847HIGHbajo ataque
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RIESGO
abrir ↗
← anteriorpágina 832 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.