Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.900exploits catalogados

34.597CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.725VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientes populares riesgo

21.624 exploits

Referência

CVE-2017-8484

CVE-2017-8484—

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2,

23RIESGO

Referência

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

Referência

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

Referência

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

Referência

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

Referência

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

Referência

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

Referência

CVE-2023-1671

CVE-2023-1671CRITICALbajo ataque

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10

100RIESGO

Referência

CVE-2023-32315

CVE-2023-32315HIGHbajo ataque

Openfire administration console authentication bypass

100RIESGO

Referência

CVE-2024-3273

CVE-2024-3273HIGHbajo ataque

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

100RIESGO

Referência

CVE-2020-14882

CVE-2020-14882CRITICALbajo ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RIESGO

Referência

CVE-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

Referência

CVE-2018-11776

CVE-2018-11776HIGHbajo ataque

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RIESGO

Referência

CVE-2018-11776

CVE-2018-11776HIGHbajo ataque

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RIESGO

Referência

CVE-2018-11776

CVE-2018-11776HIGHbajo ataque

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RIESGO

Referência

CVE-2020-8515

CVE-2020-8515CRITICALbajo ataque

DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow

100RIESGO

Referência

CVE-2018-7600

CVE-2018-7600CRITICALbajo ataqueransomware

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RIESGO

Referência

CVE-2018-7600

CVE-2018-7600CRITICALbajo ataqueransomware

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RIESGO

Referência

CVE-2018-7600

CVE-2018-7600CRITICALbajo ataqueransomware

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RIESGO

Referência

CVE-2026-8214

CVE-2026-8214MEDIUM

Industrial Application Software IAS Canias ERP RMI doAction improper authentication

33RIESGO

Referência

CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

Referência

CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

Referência

CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

Referência

CVE-2024-27199

CVE-2024-27199HIGHbajo ataqueransomware

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

100RIESGO

Referência

CVE-2022-44877

CVE-2022-44877CRITICALbajo ataque

login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execut

100RIESGO

Referência

CVE-2022-44877

CVE-2022-44877CRITICALbajo ataque

login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execut

100RIESGO

Referência

CVE-2022-44877

CVE-2022-44877CRITICALbajo ataque

login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execut

100RIESGO

Referência

CVE-2017-12617

CVE-2017-12617HIGHbajo ataque

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RIESGO

Referência

CVE-2019-9670

CVE-2019-9670CRITICALbajo ataque

mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XX

100RIESGO

Referência

CVE-2023-46805

CVE-2023-46805HIGHbajo ataqueransomware

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.