Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.836exploits catalogados
32.133CVEs con explotación pública
1932probados en laboratorio
TodosExploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8156Nuclei 4201Metasploit 3462✓ solo verificadosrecientespopularesriesgo
4201 exploits
Nucleihigh
WordPress Competition Form Plugin <= 2.0 - Cross-Site Scripting
CVE-2024-12749HIGH
Competition Form <= 2.0 - Reflected XSS
36RIESGO
abrir ↗
Nucleimedium
BentoML v1.3.9 - Open Redirect
CVE-2024-12760—
15RIESGO
abrir ↗
Nucleicritical
Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change
CVE-2024-12824CRITICAL
Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change
43RIESGO
abrir ↗
Nucleihigh
Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read
CVE-2024-12849HIGH
Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read
48RIESGO
abrir ↗
Nucleimedium
Custom Field Manager WordPress - Cross-Site Scripting
CVE-2024-12873MEDIUM
Custom Field Manager <= 1.0 - Reflected XSS Vulnerability
28RIESGO
abrir ↗
Nucleimedium
Lazy Blocks <= 3.8.2 - Cross-Site Scripting
CVE-2024-12878HIGH
Custom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSS
36RIESGO
abrir ↗
Nucleicritical
DrayTek Vigor - Command Injection
CVE-2024-12987MEDIUMbajo ataque
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
100RIESGO
abrir ↗
Nucleihigh
Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting
CVE-2024-13055HIGH
Dyn Business Panel <= 1.0.0 - Reflected XSS
36RIESGO
abrir ↗
Nucleihigh
WP Triggers Lite - Cross-Site Scripting
CVE-2024-13094HIGH
WP Triggers Lite <= 2.5.3 - Reflected XSS
36RIESGO
abrir ↗
Nucleimedium
WP Finance Plugin <= 1.3.6 - Cross-Site Scripting
CVE-2024-13097MEDIUM
WP Finance <= 1.3.6 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
WordPress Email Newsletter - Reflected XSS
CVE-2024-13098MEDIUM
WP Email Newsletter <= 1.1 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
Widget4Call WordPress - Cross-Site Scripting
CVE-2024-13099MEDIUM
Widget4call <= 1.0.7 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
WP MediaTagger <= 4.1.1 - Cross-Site Scripting
CVE-2024-13112MEDIUM
WP MediaTagger <= 4.1.1 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
WP Projects Portfolio <= 3.0 - Cross-Site Scripting
CVE-2024-13114MEDIUM
WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
WordPress Download Manager < 3.3.07 - Unauthenticated Data Exposure
CVE-2024-13126MEDIUM
Download Manager < 3.3.07 - Unauthenticated Data Exposure
28RIESGO
abrir ↗
Nucleicritical
Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive
CVE-2024-13159CRITICALbajo ataque
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up
100RIESGO
abrir ↗
Nucleicritical
Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcard
CVE-2024-13160CRITICALbajo ataque
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up
100RIESGO
abrir ↗
Nucleicritical
Ivanti EPM - Credential Coercion Vulnerability in GetHashForSingleFile
CVE-2024-13161CRITICALbajo ataque
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up
100RIESGO
abrir ↗
Nucleimedium
Privacy Policy Genius - Cross-Site Scripting
CVE-2024-13219MEDIUM
Policy Genius <= 2.0.4 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
WordPress Google Map Professional - Cross-Site Scripting
CVE-2024-13220MEDIUM
Google Map Professional <= 1.0 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
Fantastic ElasticSearch Plugin <= 4.1.0 - Cross-Site Scripting
CVE-2024-13221MEDIUM
Fantastic Elasticsearch <= 4.1.0 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
WordPress User Messages <= 1.2.4 - Reflected XSS
CVE-2024-13222MEDIUM
User Messages <= 1.2.4 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
SlideDeck 1 Lite Content Slider - Cross-Site Scripting
CVE-2024-13224MEDIUM
SlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
ECT Home Page Products - Reflected XSS
CVE-2024-13225MEDIUM
ECT Home Page Products <= 1.9 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
A5 Custom Login Page - Reflected XSS
CVE-2024-13226MEDIUM
A5 Custom Login Page <= 2.8.1 - Reflected XSS
28RIESGO
abrir ↗
Nucleihigh
Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection
CVE-2024-13322HIGH
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection
36RIESGO
abrir ↗
Nucleimedium
Glossy WordPress - Reflected XSS
CVE-2024-13325MEDIUM
Glossy <= 2.3.5 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting
CVE-2024-13326MEDIUM
iBuildApp <= 0.2.0 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
Musicbox WordPress - Reflected XSS
CVE-2024-13327MEDIUM
Musicbox <= 2.0.3 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
Giga Messenger WordPress - Cross-Site Scripting
CVE-2024-13328MEDIUM
Giga Messenger Bots <= 2.3.1 - Reflected XSS
28RIESGO
abrir ↗
← anteriorpágina 87 / 141siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.