Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.624 exploits
Referência
CVE-2026-5657
CVE-2026-5657MEDIUM
Double Free in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2018-25299
CVE-2018-25299HIGH
Prime95 29.4b8 Local Buffer Overflow via SEH
41RIESGO
abrir ↗
Referência
CVE-2018-25298
CVE-2018-25298MEDIUM
Merge PACS 7.0 Cross-Site Request Forgery via merge-viewer
33RIESGO
abrir ↗
Referência
CVE-2026-7401
CVE-2026-7401MEDIUM
SourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-7400
CVE-2026-7400MEDIUM
geekgod382 filesystem-mcp-server read_file_tool/write_file_tool server.py is_path_allowed path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7386
CVE-2026-7386MEDIUM
fatbobman mail-mcp-bridge mail_mcp_server.py path traversal
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Angelo-Emlak 1.0 - Multiple SQL Injections
CVE-2008-2047—webappsasp
Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2026-7319
CVE-2026-7319MEDIUM
elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7318
CVE-2026-7318MEDIUM
elie mcp-project research_server.py search_papers path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7317
CVE-2026-7317LOW
Grav CMS Cache Value FileCache.php doGet deserialization
28RIESGO
abrir ↗
Referência
CVE-2026-7316
CVE-2026-7316MEDIUM
eiliyaabedini aider-mcp code_with_ai aider_mcp.py command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7314
CVE-2026-7314MEDIUM
eiceblue spire-doc-mcp-server base.py get_doc_path path traversal
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Joovili 3.1 - 'browse.videos.php' SQL Injection
CVE-2008-2063—webappsphp
SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Jokes Site Script - 'jokes.php' SQL Injection
CVE-2008-2065—webappsphp
SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2026-41465
CVE-2026-41465HIGH
ProjeQtor < 12.4.4 Path Traversal via dynamicDialog.php
41RIESGO
abrir ↗
Referência✓ VexDay Proof
BlogMe PHP 1.1 - 'comments.php' SQL Injection
CVE-2008-2175—webappsphp
SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting
CVE-2008-2180—webappsphp
Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting
CVE-2008-2181—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection
CVE-2008-2191—webappsphp
SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DeluxeBB 1.2 - Multiple Vulnerabilities
CVE-2008-2194—webappsphp
SQL injection vulnerability in forums.php in DeluxeBB 1.2 and earlier allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Miniweb 2.0 - 'historymonth' SQL Injection
CVE-2008-2197—webappsphp
SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Project Based Calendaring System (PBCS) 0.7.1 - Multiple Vulnerabilities
CVE-2008-2216—webappsphp
Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
GameCMS Lite 1.0 - 'systemId' SQL Injection
CVE-2008-2225—webappsphp
SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Windows - InternalOpenColorProfile Heap Overflow (PoC) (MS08-046)
CVE-2008-2245—doswindows
Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Manage
35RIESGO
abrir ↗
Referência✓ VexDay Proof
EMO Realty Manager - 'ida' SQL Injection
CVE-2008-2265—webappsphp
SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Kostenloses Linkmanagementscript - Remote File Inclusion
CVE-2008-2270—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
idautomation bar code - ActiveX Multiple Vulnerabilities
CVE-2008-2283—remotewindows
IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveEn
23RIESGO
abrir ↗
Referência
CVE-2008-2335
CVE-2008-2335—
Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attacke
23RIESGO
abrir ↗
Referência
CVE-2008-2335
CVE-2008-2335—
Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attacke
23RIESGO
abrir ↗
Referência
CVE-2008-2335
CVE-2008-2335—
Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attacke
23RIESGO
abrir ↗
← anteriorpágina 246 / 721siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.