Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.624 exploits
Referência
CVE-2010-2459
CVE-2010-2459—
SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2018-12897
CVE-2018-12897—
SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow.
23RIESGO
abrir ↗
Referência
CVE-2009-4806
CVE-2009-4806—
admin/save_user.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which
23RIESGO
abrir ↗
Referência
CVE-2019-0881
CVE-2019-0881—
An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows
23RIESGO
abrir ↗
Referência
CVE-2026-5534
CVE-2026-5534MEDIUM
itsourcecode Online Enrollment System Parameter index.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2016-6851
CVE-2016-6851—
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX G
23RIESGO
abrir ↗
Referência
CVE-2016-6851
CVE-2016-6851—
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX G
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CCleague Pro 1.0.1RC1 - 'cookie' Remote Code Execution
CVE-2006-4721—webappsphp
Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and
23RIESGO
abrir ↗
Referência
CVE-2013-2594
CVE-2013-2594—
SQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through 3.4.14 allows remote at
23RIESGO
abrir ↗
Referência
CVE-2013-2594
CVE-2013-2594—
SQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through 3.4.14 allows remote at
23RIESGO
abrir ↗
Referência
CVE-2026-5533
CVE-2026-5533MEDIUM
badlogic pi-mono SVG Artifact SvgArtifact.ts cross site scripting
33RIESGO
abrir ↗
Referência✓ VexDay Proof
GL-SH Deaf Forum 6.4.4 - Local File Inclusion
CVE-2007-3535—webappsphp
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Scribe 0.2 - PHP Remote Code Execution
CVE-2007-5823—webappsphp
Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or ove
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SlimCMS 1.0.0 - 'redirect.php' Privilege Escalation
CVE-2008-5708—webappsphp
redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative us
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RPortal 1.1 - 'file_op' Remote File Inclusion
CVE-2008-6099—webappsphp
PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2018-19041
CVE-2018-19041—
The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the
23RIESGO
abrir ↗
Referência
CVE-2022-47877
CVE-2022-47877CRITICAL
A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web
48RIESGO
abrir ↗
Referência
CVE-2017-12971
CVE-2017-12971—
Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗
Referência
CVE-2017-12971
CVE-2017-12971—
Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗
Referência
CVE-2010-4330
CVE-2010-4330—
Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2026-27476
CVE-2026-27476CRITICAL
RustFly 2.0.0 Command Injection via UDP Remote Control
48RIESGO
abrir ↗
Referência
CVE-2023-23286
CVE-2023-23286MEDIUM
Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the s
33RIESGO
abrir ↗
Referência
CVE-2018-18760
CVE-2018-18760—
RhinOS 3.0 build 1190 allows CSRF.
23RIESGO
abrir ↗
Referência
CVE-2018-18760
CVE-2018-18760—
RhinOS 3.0 build 1190 allows CSRF.
23RIESGO
abrir ↗
Referência
CVE-2019-11564
CVE-2019-11564—
A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HT
23RIESGO
abrir ↗
Referência
CVE-2010-1301
CVE-2010-1301—
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2010-1301
CVE-2010-1301—
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2017-8382
CVE-2017-8382—
admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user acc
23RIESGO
abrir ↗
Referência
CVE-2017-8382
CVE-2017-8382—
admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user acc
23RIESGO
abrir ↗
Referência
CVE-2014-2089
CVE-2014-2089—
ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .
23RIESGO
abrir ↗
← anteriorpágina 256 / 721siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.