Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-87841
CVE-2026-87841MEDIUM
UnitechPay <= 1.0.6.3 - Unauthenticated Order Payment Bypass via Unsigned Webhook
33RIESGO
abrir ↗
Referência
CVE-2026-88931
CVE-2026-88931MEDIUM
Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update
33RIESGO
abrir ↗
Referência
CVE-2007-6752
CVE-2007-6752—
Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authent
23RIESGO
abrir ↗
Referência
CVE-2007-6752
CVE-2007-6752—
Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authent
23RIESGO
abrir ↗
Referência
CVE-2026-14777
CVE-2026-14777MEDIUM
SourceCodester Onlne Examination & Learning Management System announcements.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-14776
CVE-2026-14776MEDIUM
SourceCodester Onlne Examination & Learning Management System Filename Extension upload_files.php pathinfo unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-14775
CVE-2026-14775MEDIUM
SourceCodester Onlne Examination & Learning Management System process_lesson.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-14774
CVE-2026-14774MEDIUM
itsourcecode Hospital Management System paymentdischarge.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14773
CVE-2026-14773MEDIUM
itsourcecode Hospital Management System payment.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14772
CVE-2026-14772MEDIUM
SourceCodester Class and Exam Timetabling System edit_course1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-10830
CVE-2018-10830—
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of serv
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Softbiz Link Directory Script - SQL Injection
CVE-2007-5996—webappsphp
SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2020-3950
CVE-2020-3950HIGHbajo ataque
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for
86RIESGO
abrir ↗
Referência
CVE-2026-103692
CVE-2026-103692CRITICAL
Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call
48RIESGO
abrir ↗
Referência
CVE-2021-3156
CVE-2021-3156HIGHbajo ataque
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir ↗
Referência✓ VexDay Proof
samPHPweb 4.2.2 - 'songinfo.php' SQL Injection
CVE-2008-0187—webappsphp
SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2021-3156
CVE-2021-3156HIGHbajo ataque
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir ↗
Referência✓ VexDay Proof
ClipShare < 3.0.1 - 'tid' SQL Injection
CVE-2008-2793—webappsphp
SQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
doITlive CMS 2.50 - SQL Injection / Cross-Site Scripting
CVE-2008-2842—webappsasp
Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BoatScripts Classifieds - 'type' SQL Injection
CVE-2008-2846—webappsphp
SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2018-1111
CVE-2018-1111HIGH
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in
78RIESGO
abrir ↗
Referência
CVE-2026-10873
CVE-2026-10873HIGH
Shibby Tomato Web UI rstats rstats_path os command injection
41RIESGO
abrir ↗
Referência✓ VexDay Proof
PhotoKorn Gallery 1.543 - 'pic' SQL Injection
CVE-2008-0614—webappsphp
SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2021-36260
CVE-2021-36260CRITICALbajo ataque
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RIESGO
abrir ↗
Referência✓ VexDay Proof
NERO Media Player 1.4.0.35b - '.m3u' File Buffer Overflow (PoC)
CVE-2008-0619—doswindows
Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbi
28RIESGO
abrir ↗
Referência
CVE-2026-6324
CVE-2026-6324MEDIUM
Libsoup: libsoup: http request smuggling via unsigned to signed conversion error
33RIESGO
abrir ↗
Referência
CVE-2026-75796
CVE-2026-75796HIGH
AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools
41RIESGO
abrir ↗
Referência
CVE-2026-9606
CVE-2026-9606MEDIUM
itsourcecode Courier Management System manage_user.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9605
CVE-2026-9605MEDIUM
GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Plogger 3.0 - SQL Injection
CVE-2008-3563—webappsphp
Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
← anteriorpágina 838 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.