Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.624 exploits
Referência
CVE-2026-5618
CVE-2026-5618MEDIUM
kalcaddle kodbox shareMake/shareCheck server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-5615
CVE-2026-5615MEDIUM
givanz Vvvebjs File Upload Endpoint upload.php cross site scripting
48RIESGO
abrir ↗
Referência
CVE-2026-5614
CVE-2026-5614HIGH
Belkin F9K1015 formSetPassword stack-based overflow
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre Job Board - 'JobSearch.php' SQL Injection
CVE-2008-2915—webappsphp
Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre ADS Portal 2.0 - SQL Injection
CVE-2008-2916—webappsphp
Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remot
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Cartweaver 3 - 'prodId' Blind SQL Injection
CVE-2008-2918—webappsphp
SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
GLLCTS2 - 'sort' Blind SQL Injection
CVE-2008-2919—webappsphp
SQL injection vulnerability in listing.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2026-5605
CVE-2026-5605HIGH
Tenda CH22 WrlExtraSet formWrlExtraSet stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5604
CVE-2026-5604HIGH
Tenda CH22 Parameter CertLocalPrecreate formCertLocalPrecreate stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5603
CVE-2026-5603MEDIUM
elgentos magento2-dev-mcp index.ts executeMagerun2Command os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5602
CVE-2026-5602MEDIUM
Nor2-io heim-mcp new_heim_application tools.ts registerTools os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5601
CVE-2026-5601MEDIUM
Acrel Electrical Prepaid Cloud Platform Backup File bin.rar information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-5597
CVE-2026-5597MEDIUM
griptape-ai griptape ComputerTool tool.py path traversal
33RIESGO
abrir ↗
Referência
CVE-2019-25675
CVE-2019-25675HIGH
eDirectory All Versions SQL Injection Authentication Bypass
41RIESGO
abrir ↗
Referência
CVE-2019-25704
CVE-2019-25704HIGH
Kados R10 GreenBee SQL Injection via filter_user_mail
41RIESGO
abrir ↗
Referência
CVE-2019-25702
CVE-2019-25702HIGH
Kados R10 GreenBee SQL Injection via id_project Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25700
CVE-2019-25700HIGH
Kados R10 GreenBee SQL Injection via sort_direction Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25698
CVE-2019-25698HIGH
Kados R10 GreenBee SQL Injection via id_to_delete Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25696
CVE-2019-25696HIGH
Kados R10 GreenBee SQL Injection via language_tag Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25694
CVE-2019-25694HIGH
Kados R10 GreenBee SQL Injection via user2reset
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Postfix 2.6-20080814 - 'symlink' Local Privilege Escalation
CVE-2008-2936—locallinux
Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system suppor
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal (PoC)
CVE-2008-2938—remotemultiple
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16,
60RIESGO
abrir ↗
Referência✓ VexDay Proof
Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution
CVE-2008-2950—locallinux
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Fuzzylime CMS 3.01 - Remote Command Execution
CVE-2008-3165—webappsphp
Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and earlier, when magic_quotes_gpc is disabled, al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BoonEx Ray 3.5 - 'sIncPath' Remote File Inclusion
CVE-2008-3166—webappsphp
PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ContentNow 1.4.1 - Arbitrary File Upload / Cross-Site Scripting
CVE-2008-3180—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remot
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DreamNews Manager - 'id' SQL Injection
CVE-2008-3189—webappsphp
SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
jsite 1.0 oe - SQL Injection / Local File Inclusion
CVE-2008-3193—webappsphp
SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page param
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pluck CMS 4.5.1 (Windows) - 'blogpost' Local File Inclusion
CVE-2008-3194—webappsphp
Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Avlc Forum - 'vlc_forum.php' SQL Injection
CVE-2008-3200—webappsphp
SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
← anteriorpágina 257 / 721siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.