Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.035exploits catalogados

39.531CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientes populares riesgo

4478 exploits

Nucleihigh

WP Fastest Cache 1.2.2 - SQL Injection

CVE-2023-6063—

WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection

60RIESGO

abrir ↗

Nucleimedium

Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure

CVE-2023-6065—

Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data Exposure

23RIESGO

abrir ↗

Nucleihigh

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure

CVE-2023-6114—

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure

30RIESGO

abrir ↗

Nucleihigh

WordPress Backup Migration <= 1.3.6 - Path Traversal

CVE-2023-6266HIGH

Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure

36RIESGO

abrir ↗

Nucleimedium

TOTVS Fluig Platform - Cross-Site Scripting

CVE-2023-6275LOW

TOTVS Fluig Platform mobileredir openApp.jsp cross site scripting

23RIESGO

abrir ↗

Nucleicritical

Control iD iDSecure - Authentication Bypass

CVE-2023-6329CRITICAL

Control iD iDSecure passwordCustom Authentication Bypass

75RIESGO

abrir ↗

Nucleicritical

WordPress My Calendar <3.4.22 - SQL Injection

CVE-2023-6360HIGH

The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in th

48RIESGO

abrir ↗

Nucleimedium

OpenCMS 14 & 15 - Cross Site Scripting

CVE-2023-6379MEDIUM

Cross-site Scripting in Alkacon Software OpenCms

28RIESGO

abrir ↗

Nucleimedium

OpenCms 14 & 15 - Open Redirect

CVE-2023-6380MEDIUM

Open Redirect in Alkacon Software OpenCms

28RIESGO

abrir ↗

Nucleimedium

WordPress Toolbar <= 2.2.6 - Open Redirect

CVE-2023-6389MEDIUM

WordPress Toolbar <= 2.2.6 - Open Redirect

33RIESGO

abrir ↗

Nucleimedium

WordPress Download Manager - File Password Exposure

CVE-2023-6421HIGH

Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

36RIESGO

abrir ↗

Nucleimedium

Seriously Simple Podcasting < 3.0.0 - Information Disclosure

CVE-2023-6444MEDIUM

Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure

28RIESGO

abrir ↗

Nucleihigh

Prime Mover < 1.9.3 - Sensitive Data Exposure

CVE-2023-6505HIGH

Prime Mover < 1.9.3 - Directory Listing to Sensitive Data Exposure

48RIESGO

abrir ↗

Nucleicritical

Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read

CVE-2023-6549HIGHbajo ataque

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Un

78RIESGO

abrir ↗

Nucleicritical

Worpress Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

CVE-2023-6553CRITICAL

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

85RIESGO

abrir ↗

Nucleihigh

LearnPress <= 4.2.5.7 - SQL Injection

CVE-2023-6567CRITICAL

LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by

75RIESGO

abrir ↗

Nucleimedium

Mlflow - Cross-Site Scripting

CVE-2023-6568MEDIUM

Reflected XSS via Content-Type Header in mlflow/mlflow

28RIESGO

abrir ↗

Nucleimedium

WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing

CVE-2023-6592MEDIUM

FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure

28RIESGO

abrir ↗

Nucleicritical

Essential Blocks < 4.4.3 - Local File Inclusion

CVE-2023-6623CRITICAL

Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion

75RIESGO

abrir ↗

Nucleicritical

LearnPress < 4.2.5.8 - Remote Code Execution

CVE-2023-6634HIGH

LearnPress <= 4.2.5.7 - Command Injection

56RIESGO

abrir ↗

Nucleihigh

Hongjing e-HR 2020 - SQL Injection

CVE-2023-6655HIGH

Hongjing e-HR Login Interface loadhistroyorgtree sql injection

36RIESGO

abrir ↗

Nucleimedium

WP Go Maps (formerly WP Google Maps) < 9.0.29 - Cross-Site Scripting

CVE-2023-6697MEDIUM

WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting

28RIESGO

abrir ↗

Nucleicritical

WordPress WP Clone <= 2.4.2 - Database Backup Exposure

CVE-2023-6750HIGH

Clone < 2.4.3 - Unauthenticated Backup Download

36RIESGO

abrir ↗

Nucleimedium

Payment Gateway for Telcell < 2.0.4 - Open Redirect

CVE-2023-6786MEDIUM

Payment Gateway for Telcell <= 2.0.1 - Unauthenticated Open Redirect

28RIESGO

abrir ↗

Nucleimedium

LifterLMS < 8.0.1 - Cross-Site Scripting

CVE-2024-13619MEDIUM

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 8.0.1 - Reflected XSS

28RIESGO

abrir ↗

Nucleihigh

WordPress WPMovieLibrary Plugin <= 2.1.4.8 - Cross-Site Scripting

CVE-2024-13624HIGH

WPMovieLibrary <= 2.1.4.8 - Reflected XSS

36RIESGO

abrir ↗

Nucleihigh

Tube Video Ads Lite - Reflected XSS

CVE-2024-13625HIGH

Tube Video Ads Lite <= 1.5.7 - Reflected XSS

36RIESGO

abrir ↗

Nucleimedium

OWL Carousel Slider - Cross-Site Scripting

CVE-2024-13627MEDIUM

WP Touch Slider <= 2.2 - Reflected XSS

28RIESGO

abrir ↗

Nucleimedium

WP Pricing Table - Reflected XSS

CVE-2024-13628MEDIUM

WP Pricing Table <= 1.1 - Reflected XSS

28RIESGO

abrir ↗

Nucleimedium

NewsTicker <= 1.0 - Reflected Cross-Site Scripting

CVE-2024-13630MEDIUM

News List <= 1.0 - Reflected XSS

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.