Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
84.035exploits catalogados
39.531CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientespopularesriesgo
4478 exploits
Nucleimedium
Linear eMerge E3-Series - Cross-Site Scripting
Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_templat
28RIESGO
abrir ↗Nucleihigh
Bangresto - SQL Injection
mesinkasir Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D parameter.
48RIESGO
abrir ↗Nucleimedium
NexusPHP <1.7.33 - Cross-Site Scripting
Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to injec
28RIESGO
abrir ↗Nucleimedium
kkFileView 4.1.0 - Cross-Site Scripting
kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /control
28RIESGO
abrir ↗Nucleicritical
Masa CMS - Authentication Bypass
A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authenticatio
18RIESGO
abrir ↗Nucleicritical
Mura CMS <10.0.580 - Authentication Bypass
A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a
43RIESGO
abrir ↗Nucleihigh
Smart Office Web 20.28 - Information Disclosure
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the
68RIESGO
abrir ↗Nucleihigh
Apache OFBiz < 18.12.07 - Local File Inclusion
Apache OFBiz: Arbitrary file reading vulnerability
41RIESGO
abrir ↗Nucleicritical
LearnPress Plugin < 4.2.0 - Local File Inclusion
WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion
63RIESGO
abrir ↗Nucleicritical
vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution
vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP reques
68RIESGO
abrir ↗Nucleicritical
GeoServer OGC Filter - SQL Injection
Unfiltered SQL Injection Vulnerabilities in Geoserver
85RIESGO
abrir ↗Nucleimedium
WordPress Easy Forms for Mailchimp Plugin < 6.8.9 - Cross-Site Scripting
Easy Forms for Mailchimp < 6.8.9 - Reflected XSS
28RIESGO
abrir ↗Nucleihigh
Apache Druid Kafka Connect - Remote Code Execution
Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect
78RIESGO
abrir ↗Nucleicritical
D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection
OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a cr
95RIESGO
abrir ↗Nucleimedium
ChurchCRM 4.5.3 - Cross-Site Scripting
A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web
28RIESGO
abrir ↗Nucleihigh
Metersphere - Arbitrary File Read
Improper access control to download file in metersphere
48RIESGO
abrir ↗Nucleicritical
Ruckus Wireless Admin - Remote Code Execution
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated
95RIESGO
abrir ↗Nucleicritical
OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection
Remote Code Execution in OpenTSDB
75RIESGO
abrir ↗Nucleicritical
ZoneMinder Snapshots - Command Injection
ZoneMinder vulnerable to Missing Authorization
58RIESGO
abrir ↗Nucleihigh
Lexmark Printers - Command Injection
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).
68RIESGO
abrir ↗Nucleimedium
KiviCare WordPress Plugin - Cross-Site Scripting
KiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting
18RIESGO
abrir ↗Nucleihigh
STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2
68RIESGO
abrir ↗Nucleihigh
STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2
61RIESGO
abrir ↗Nucleicritical
Arcserve UDP <= 9.0.6034 - Authentication Bypass
Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashSe
50RIESGO
abrir ↗Nucleihigh
Adobe Coldfusion - Authentication Bypass
CVE-2023-38205 issues | ColdFusion Admin Panel Access
41RIESGO
abrir ↗Nucleihigh
Adobe ColdFusion - Local File Read
Adobe ColdFusion Improper Access Control Arbitrary code execution
100RIESGO
abrir ↗Nucleicritical
Jorani 1.0.0 - Remote Code Execution
In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.
60RIESGO
abrir ↗Nucleicritical
Weaver E-Office 9.5 - Remote Code Execution
Weaver E-Office uploadify.php unrestricted upload
53RIESGO
abrir ↗Nucleicritical
DCBI-Netlog-LAB v1.0 - Command Injection
An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attac
55RIESGO
abrir ↗Nucleimedium
ChurchCRM 4.5.3 - Cross-Site Scripting
A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web scr
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.