Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.957exploits catalogados

32.195CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8182Nuclei 4217Metasploit 3462✓ solo verificadosrecientes populares riesgo

4217 exploits

Nucleihigh

ProFTPD < 1.3.8a - DoS via Out-of-Bounds Read

CVE-2023-51713—

make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandl

18RIESGO

abrir ↗

Nucleicritical

Fortinet FortiSIEM - OS Command Injection

CVE-2024-23108CRITICAL

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet

85RIESGO

abrir ↗

Nucleihigh

Pure-FTPd < 1.0.52 - Buffer Overflow

CVE-2024-48208HIGH

pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the

36RIESGO

abrir ↗

Nucleihigh

ProFTPD ≤ 1.3.8b - Privilege Escalation via mod_sql

CVE-2024-48651HIGH

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of th

36RIESGO

abrir ↗

Nucleicritical

Fortinet FortiSIEM - OS Command Injection

CVE-2025-25256CRITICAL

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in

75RIESGO

abrir ↗

Nucleicritical

Güralp Systems FMUS Series - Unauthenticated Access

CVE-2025-8286CRITICAL

Güralp Systems FMUS Series and MIN Series Devices

43RIESGO

abrir ↗

Nucleimedium

Mailpit < 1.28.2 - SMTP CRLF Injection

CVE-2026-23829MEDIUM

Mailpit has SMTP Header Injection via Regex Bypass

28RIESGO

abrir ↗

Nucleihigh

ProFTPD mod_sql - Preauth User Backdoor

CVE-2026-42167HIGH

mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where th

36RIESGO

abrir ↗

Nucleicritical

ProFTPd-1.3.3c - Backdoor Command Execution

CVE-2010-20103CRITICAL

ProFTPD 1.3.3c Backdoor Command Execution

63RIESGO

abrir ↗

Nucleimedium

MySQL - Authentication Bypass

CVE-2012-2122—

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor

60RIESGO

abrir ↗

Nucleihigh

Memcached Server SASL Authentication - Remote Code Execution

CVE-2016-8706HIGH

An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of

48RIESGO

abrir ↗

Nucleicritical

Cisco Smart Install - Configuration Download

CVE-2018-0171HIGHbajo ataque

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentica

100RIESGO

abrir ↗

Nucleihigh

Apache HTTP Server - NULL Pointer Dereference

CVE-2018-8011—

mod_md, DoS via Coredumps on specially crafted requests

30RIESGO

abrir ↗

Nucleicritical

NTPsec > 1.1.3 - 'ctl_getitem' Out-of-Bounds Read

CVE-2019-6443—

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read

50RIESGO

abrir ↗

Nucleihigh

PostgreSQL 9.3-12.3 Authenticated Remote Code Execution

CVE-2019-9193—

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

60RIESGO

abrir ↗

Nucleicritical

Oracle WebLogic Server - Remote Code Execution (Insecure Deserialization)

CVE-2020-14644CRITICALbajo ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

100RIESGO

abrir ↗

Nucleicritical

Oracle WebLogic Server - Remote Code Execution

CVE-2020-2883CRITICALbajo ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

100RIESGO

abrir ↗

Nucleicritical

IBM Data Risk Manager - Hardcoded Credentials

CVE-2020-4429CRITICAL

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrativ

65RIESGO

abrir ↗

Nucleicritical

OpenSMTPD 6.4.0-6.6.1 - Remote Code Execution

CVE-2020-7247CRITICALbajo ataque

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RIESGO

abrir ↗

Nucleihigh

Veritas Backup Exec - Broken Authentication

CVE-2021-27877HIGHbajo ataqueransomware

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authenticat

98RIESGO

abrir ↗

Nucleicritical

SolarWinds Serv-U FTP - Remote Code Execution

CVE-2021-35211CRITICALbajo ataqueransomware

Serv-U Remote Memory Escape Vulnerability

100RIESGO

abrir ↗

Nucleicritical

RealTek AP Router SDK - Arbitrary Command Injection

CVE-2021-35394CRITICALbajo ataque

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as

95RIESGO

abrir ↗

Nucleihigh

PowerDNS Authoritative Server - Denial of Service

CVE-2021-36754—

PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE

30RIESGO

abrir ↗

Nucleihigh

Oracle WebLogic Server - Unauthorized Access

CVE-2023-21839HIGHbajo ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

100RIESGO

abrir ↗

Nucleicritical

VMWare Aria Operations - Remote Code Execution

CVE-2023-34039CRITICAL

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key g

75RIESGO

abrir ↗

Nucleicritical

Acronis Cyber Infrastructure - Default Password

CVE-2023-45249CRITICALbajo ataque

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastruct

85RIESGO

abrir ↗

Nucleicritical

Apache ActiveMQ - Remote Code Execution

CVE-2023-46604CRITICALbajo ataqueransomware

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

Nucleimedium

OpenSSH Terrapin Attack - Detection

CVE-2023-48795MEDIUM

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot

50RIESGO

abrir ↗

Nucleihigh

Jenkins < 2.441 - Arbitrary File Read

CVE-2024-23897CRITICALbajo ataqueransomware

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

abrir ↗

Nucleicritical

Zimbra Collaboration Suite < 9.0.0 - Remote Code Execution

CVE-2024-45519CRITICALbajo ataque

The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9,

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.