Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
84.035exploits catalogados
39.531CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientespopularesriesgo
4478 exploits
Nucleicritical
Apache Airflow <=1.10.10 - Command Injection
An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect t
30RIESGO
abrir ↗Nucleicritical
Ghostcat - Apache Tomcat - AJP File Read/Inclusion Vulnerability
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RIESGO
abrir ↗Nucleihigh
Pure-FTPd 1.0.48 - Denial of Service
Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the con
18RIESGO
abrir ↗Nucleihigh
Pure-FTPd ≤ 1.0.49 - DoS via Uninitialized Pointer
An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases
18RIESGO
abrir ↗Nucleimedium
WordPress anti-plagiarism <=3.60 - Cross-Site Scripting
Reflected XSS in wordpress plugin anti-plagiarism v3.60
18RIESGO
abrir ↗Nucleimedium
WordPress defa-online-image-protector <=3.3 - Cross-Site Scripting
Reflected XSS in wordpress plugin defa-online-image-protector v3.3
18RIESGO
abrir ↗Nucleimedium
WordPress e-search <=1.0 - Cross-Site Scripting
Reflected XSS in wordpress plugin e-search v1.0
18RIESGO
abrir ↗Nucleimedium
WordPress e-search <=1.0 - Cross-Site Scripting
Reflected XSS in wordpress plugin e-search v1.0
18RIESGO
abrir ↗Nucleimedium
WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting
Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8
18RIESGO
abrir ↗Nucleimedium
WordPress forget-about-shortcode-buttons 1.1.1 - Cross-Site Scripting
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1
18RIESGO
abrir ↗Nucleimedium
WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting
Reflected XSS in wordpress plugin hdw-tube v1.2
18RIESGO
abrir ↗Nucleimedium
WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting
Reflected XSS in wordpress plugin hdw-tube v1.2
18RIESGO
abrir ↗Nucleimedium
WordPress heat-trackr 1.0 - Cross-Site Scripting
Reflected XSS in wordpress plugin heat-trackr v1.0
18RIESGO
abrir ↗Nucleimedium
WordPress Hero Maps Pro 2.1.0 - Cross-Site Scripting
Reflected XSS in wordpress plugin hero-maps-pro v2.1.0
18RIESGO
abrir ↗Nucleimedium
WordPress Admin Font Editor <=1.8 - Cross-Site Scripting
Reflected XSS in wordpress plugin indexisto v1.0.5
18RIESGO
abrir ↗Nucleimedium
WordPress Infusionsoft Gravity Forms <=1.5.11 - Cross-Site Scripting
Reflected XSS in wordpress plugin infusionsoft v1.5.11
18RIESGO
abrir ↗Nucleimedium
WordPress New Year Firework <=1.1.9 - Cross-Site Scripting
Reflected XSS in wordpress plugin new-year-firework v1.1.9
18RIESGO
abrir ↗Nucleimedium
WordPress Page Layout builder v1.9.3 - Cross-Site Scripting
Reflected XSS in wordpress plugin page-layout-builder v1.9.3
18RIESGO
abrir ↗Nucleimedium
WordPress MW Font Changer <=4.2.5 - Cross-Site Scripting
Reflected XSS in wordpress plugin parsi-font v4.2.5
18RIESGO
abrir ↗Nucleimedium
WordPress Photoxhibit 2.1.8 - Cross-Site Scripting
Reflected XSS in wordpress plugin photoxhibit v2.1.8
18RIESGO
abrir ↗Nucleimedium
WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting
Reflected XSS in wordpress plugin pondol-formmail v1.1
18RIESGO
abrir ↗Nucleimedium
WordPress S3 Video <=0.983 - Cross-Site Scripting
Reflected XSS in wordpress plugin s3-video v0.983
18RIESGO
abrir ↗Nucleimedium
WordPress Simpel Reserveren <=3.5.2 - Cross-Site Scripting
Reflected XSS in wordpress plugin simpel-reserveren v3.5.2
18RIESGO
abrir ↗Nucleimedium
WordPress Tidio-form <=1.0 - Cross-Site Scripting
Reflected XSS in wordpress plugin tidio-form v1.0
18RIESGO
abrir ↗Nucleimedium
WordPress Tidio Gallery <=1.1 - Cross-Site Scripting
Reflected XSS in wordpress plugin tidio-gallery v1.1
18RIESGO
abrir ↗Nucleimedium
WordPress WHIZZ <=1.0.7 - Cross-Site Scripting
Reflected XSS in wordpress plugin whizz v1.0.7
18RIESGO
abrir ↗Nucleimedium
WordPress WPSOLR <=8.6 - Cross-Site Scripting
Reflected XSS in wordpress plugin wpsolr-search-engine v7.6
18RIESGO
abrir ↗Nucleicritical
WordPress PHPMailer < 5.2.18 - Remote Code Execution
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RIESGO
abrir ↗Nucleicritical
Western Digital MyCloud NAS - Command Injection
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytic
40RIESGO
abrir ↗Nucleicritical
Zabbix - SQL Injection
SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQ
40RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.