Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.958exploits catalogados

36.206CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8829Nuclei 4357Metasploit 3489✓ solo verificadosrecientes populares riesgo

22.832 exploits

Referência

CVE-2019-12725

CVE-2019-12725—

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap

60RIESGO

abrir ↗

Referência✓ VexDay Proof

LibSPF2 < 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)

CVE-2008-2469—dosmultiple

Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remo

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Total Video Player 1.20 - '.m3u' File Local Stack Buffer Overflow

CVE-2007-0949—localwindows

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers t

28RIESGO

abrir ↗

Referência

CVE-2012-1784

CVE-2012-1784—

SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid par

23RIESGO

abrir ↗

Referência

CVE-2017-3599

CVE-2017-3599—

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions t

45RIESGO

abrir ↗

Referência

CVE-2018-11776

CVE-2018-11776HIGHbajo ataque

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RIESGO

abrir ↗

Referência

CVE-2017-0146

CVE-2017-0146HIGHbajo ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPRaider 1.0.7 - 'PHPbb3.functions.php' Remote File Inclusion

CVE-2008-2481—webappsphp

PHP remote file inclusion vulnerability in authentication/phpbb3/phpbb3.functions.php in phpRaider 1.0.7 and 1.0.7a, whe

23RIESGO

abrir ↗

Referência

CVE-2022-44268

CVE-2022-44268MEDIUM

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RIESGO

abrir ↗

Referência✓ VexDay Proof

Xomol CMS 1.2 - Authentication Bypass / Local File Inclusion

CVE-2008-2484—webappsphp

SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc is disabled, allows remote attac

23RIESGO

abrir ↗

Referência

Ericsson Network Location MPS GMPC21 - Remote Code Execution (RCE) (Metasploit)

CVE-2021-43339—webappsmultiple

In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file

23RIESGO

abrir ↗

Referência✓ VexDay Proof

RoomPHPlanning 1.5 - Arbitrary Add Admin

CVE-2008-2488—webappsphp

admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated

23RIESGO

abrir ↗

Referência

CVE-2019-17558

CVE-2019-17558HIGHbajo ataque

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V

100RIESGO

abrir ↗

Referência✓ VexDay Proof

Netbutikker 4 - SQL Injection

CVE-2008-2504—webappsphp

Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência

CVE-2024-7954

CVE-2024-7954CRITICAL

SPIP porte_plume Plugin Arbitrary PHP Execution

85RIESGO

abrir ↗

Referência

CVE-2024-13160

CVE-2024-13160CRITICALbajo ataque

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

100RIESGO

abrir ↗

Referência

CVE-2025-37164

CVE-2025-37164CRITICALbajo ataque

A remote code execution issue exists in HPE OneView.

100RIESGO

abrir ↗

Referência

CVE-2019-7195

CVE-2019-7195CRITICALbajo ataqueransomware

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fi

100RIESGO

abrir ↗

Referência

CVE-2019-17621

CVE-2019-17621CRITICALbajo ataque

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated rem

100RIESGO

abrir ↗

Referência

CVE-2018-4878

CVE-2018-4878HIGHbajo ataqueransomware

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to

93RIESGO

abrir ↗

Referência

X.Org X Server 1.20.4 - Local Stack Overflow

CVE-2019-17624—locallinux

"" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sendin

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CA Internet Security Suite 2008 - 'SaveToFile()' File Corruption (PoC)

CVE-2008-2511—doswindows

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEv

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Mega File Hosting Script 1.2 - 'fid' SQL Injection

CVE-2008-2521—webappsphp

SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authe

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)

CVE-2023-33584CRITICALwebappsphp

Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to

53RIESGO

abrir ↗

Referência

CVE-2007-2821

CVE-2007-2821—

SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.01 - Authentication Bypass

CVE-2007-2822—webappsphp

TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Basic 6.0 Project - Company Name Stack Overflow (PoC)

CVE-2007-2884—doswindows

Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Basic 6.0 Project - Description Stack Overflow (PoC)

CVE-2007-2884—doswindows

Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial

35RIESGO

abrir ↗

Referência✓ VexDay Proof

UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (PoC)

CVE-2007-2888—doswindows

Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrar

50RIESGO

abrir ↗

Referência

CVE-2023-33592

CVE-2023-33592—

Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lf

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.