Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.035exploits catalogados
39.531CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientespopularesriesgo
4478 exploits
Nucleihigh
Slimstat Analytics < 4.9.3.3 Subscriber - SQL Injection
CVE-2023-0630—
Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection
18RIESGO
abrir ↗
Nucleihigh
Fortra GoAnywhere MFT - Remote Code Execution
CVE-2023-0669HIGHbajo ataqueransomware
Fortra GoAnywhere MFT License Response Servlet Command Injection
100RIESGO
abrir ↗
Nucleimedium
phpIPAM 1.5.1 - Cross-site Scripting
CVE-2023-0676LOW
Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
23RIESGO
abrir ↗
Nucleimedium
PHPIPAM <v1.5.1 - Missing Authorization
CVE-2023-0678HIGH
Missing Authorization in phpipam/phpipam
48RIESGO
abrir ↗
Nucleicritical
modoboa 2.0.4 - Admin TakeOver
CVE-2023-0777HIGH
Authentication Bypass by Primary Weakness in modoboa/modoboa
61RIESGO
abrir ↗
Nucleimedium
WordPress Meta SEO <= 4.5.2 - Open Redirect
CVE-2023-0876MEDIUM
WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
28RIESGO
abrir ↗
Nucleihigh
AP Pricing Tables Lite <= 1.1.6 - SQL Injection
CVE-2023-0900HIGH
AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi
36RIESGO
abrir ↗
Nucleimedium
WordPress Japanized for WooCommerce <2.5.5 - Cross-Site Scripting
CVE-2023-0942MEDIUM
Japanized For WooCommerce <= 2.5.4 - Reflected Cross-Site Scripting
28RIESGO
abrir ↗
Nucleicritical
Flatpress < 1.3 - Path Traversal
CVE-2023-0947HIGH
Path Traversal in flatpressblog/flatpress
36RIESGO
abrir ↗
Nucleimedium
WordPress Japanized for WooCommerce <2.5.8 - Cross-Site Scripting
CVE-2023-0948MEDIUM
Japanized For WooCommerce < 2.5.8 - Reflected XSS
28RIESGO
abrir ↗
Nucleimedium
WordPress Watu Quiz <3.3.9.1 - Cross-Site Scripting
CVE-2023-0968MEDIUM
Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting
28RIESGO
abrir ↗
Nucleimedium
WordPress Redirect After Login <= 0.1.9 - Admin Stored XSS
CVE-2023-27624MEDIUM
WordPress Redirect After Login Plugin <= 0.1.9 is vulnerable to Cross Site Scripting (XSS)
28RIESGO
abrir ↗
Nucleicritical
PrestaShop `tshirtecommerce` Module - SQL Injection
CVE-2023-27637CRITICAL
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req
43RIESGO
abrir ↗
Nucleihigh
tshirtecommerce PrestaShop Module - SQL Injection
CVE-2023-27638CRITICAL
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req
43RIESGO
abrir ↗
Nucleihigh
PrestaShop TshirteCommerce - Directory Traversal
CVE-2023-27639HIGH
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req
36RIESGO
abrir ↗
Nucleihigh
PrestaShop tshirtecommerce - Directory Traversal
CVE-2023-27640HIGH
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req
36RIESGO
abrir ↗
Nucleimedium
L-Soft LISTSERV 16.5 - Cross-Site Scripting
CVE-2023-27641—
The REPORT (after z but before a) parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an attacker to conduct XS
18RIESGO
abrir ↗
Nucleihigh
Weaver OA 9.5 - Information Disclosure
CVE-2023-2766MEDIUM
Weaver OA jx2_config.ini file access
40RIESGO
abrir ↗
Nucleimedium
Super Socializer < 7.13.52 - Cross-Site Scripting
CVE-2023-2779MEDIUM
Super Socializer < 7.13.52 - Reflected XSS
48RIESGO
abrir ↗
Nucleicritical
Mlflow <2.3.1 - Local File Inclusion Bypass
CVE-2023-2780CRITICAL
Path Traversal: '\..\filename' in mlflow/mlflow
43RIESGO
abrir ↗
Nucleicritical
PrestaShop xipblog - SQL Injection
CVE-2023-27847—
SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote attacker to gain privileges vi
18RIESGO
abrir ↗
Nucleimedium
Newsletter < 7.6.9 - Cross-Site Scripting
CVE-2023-27922—
Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inj
18RIESGO
abrir ↗
Nucleimedium
EventON <= 2.1 - Missing Authorization
CVE-2023-2796—
EventON < 2.1.2 - Unauthenticated Event Access
50RIESGO
abrir ↗
Nucleicritical
WooCommerce Payments - Unauthorized Admin Access
CVE-2023-28121—
An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to s
60RIESGO
abrir ↗
Nucleimedium
Wordpress Multiple Themes - Reflected Cross-Site Scripting
CVE-2023-2813—
Multiple Themes - Reflected XSS
18RIESGO
abrir ↗
Nucleimedium
Ellucian Ethos Identity CAS - Cross-Site Scripting
CVE-2023-2822MEDIUM
Ellucian Ethos Identity logout cross site scripting
28RIESGO
abrir ↗
Nucleihigh
GitLab 16.0.0 - Path Traversal
CVE-2023-2825CRITICAL
An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a
85RIESGO
abrir ↗
Nucleicritical
Altenergy Power Control Software C1.2.5 - Remote Command Injection
CVE-2023-28343—
OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/managemen
60RIESGO
abrir ↗
Nucleihigh
MinIO Cluster Deployment - Information Disclosure
CVE-2023-28432HIGHbajo ataque
Minio Information Disclosure in Cluster Deployment
100RIESGO
abrir ↗
Nucleicritical
Wordpress Gift Cards <= 4.3.1 - SQL Injection
CVE-2023-28662CRITICAL
The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL in
55RIESGO
abrir ↗
← anteriorpágina 95 / 150siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.