Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados
34.638CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.662 exploits
Referência✓ VexDay Proof
jetAudio 7.x - ActiveX 'DownloadFromMusicStore()' Code Execution
CVE-2007-4983—remotewindows
Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic an
35RIESGO
abrir ↗
Referência
CVE-2016-3976
CVE-2016-3976HIGHbajo ataque
Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary fil
83RIESGO
abrir ↗
Referência
CVE-2019-17026
CVE-2019-17026HIGHbajo ataque
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are
83RIESGO
abrir ↗
Referência
CVE-2009-3667
CVE-2009-3667—
SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência
CVE-2018-15812
CVE-2018-15812—
DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expect
50RIESGO
abrir ↗
Referência
CVE-2019-9692
CVE-2019-9692—
class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard
50RIESGO
abrir ↗
Referência
CVE-2019-9692
CVE-2019-9692—
class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard
50RIESGO
abrir ↗
Referência
CVE-2019-9692
CVE-2019-9692—
class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard
50RIESGO
abrir ↗
Referência
CVE-2020-3952
CVE-2020-3952CRITICALbajo ataque
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Servi
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Vortex Portal 1.0.42 - Remote File Inclusion
CVE-2007-5842—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary P
35RIESGO
abrir ↗
Referência
CVE-2020-11108
CVE-2020-11108—
The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abus
60RIESGO
abrir ↗
Referência
CVE-2014-2671
CVE-2014-2671—
Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corrupt
35RIESGO
abrir ↗
Referência
CVE-2014-2671
CVE-2014-2671—
Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corrupt
35RIESGO
abrir ↗
Referência
CVE-2020-11108
CVE-2020-11108—
The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abus
60RIESGO
abrir ↗
Referência
CVE-2018-20470
CVE-2018-20470—
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerab
50RIESGO
abrir ↗
Referência
CVE-2016-4971
CVE-2016-4971—
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted F
35RIESGO
abrir ↗
Referência
CVE-2016-4971
CVE-2016-4971—
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted F
35RIESGO
abrir ↗
Referência
CVE-2026-14786
CVE-2026-14786MEDIUM
radareorg radare2 str.c r_str_word_get0set integer overflow
33RIESGO
abrir ↗
Referência
CVE-2022-35411
CVE-2022-35411—
rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header i
35RIESGO
abrir ↗
Referência
CVE-2011-5171
CVE-2011-5171—
Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to e
50RIESGO
abrir ↗
Referência
CVE-2026-14768
CVE-2026-14768MEDIUM
code-projects Real State Services builderHome.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14753
CVE-2026-14753MEDIUM
mjperpinosa stumasy Note Handler/Assignment notes authorization
33RIESGO
abrir ↗
Referência✓ VexDay Proof
DFD Cart 1.1 - Multiple Remote File Inclusions
CVE-2007-5098—webappsphp
Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, allo
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Real Player - 'rmoc3260.dll' ActiveX Control Remote Code Execution
CVE-2008-1309—remotewindows
The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, Rea
50RIESGO
abrir ↗
Referência✓ VexDay Proof
FeedMon 2.7.0.0 - outline Tag Buffer Overflow (PoC)
CVE-2009-0546—doswindows
Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbi
50RIESGO
abrir ↗
Referência
CVE-2026-14752
CVE-2026-14752MEDIUM
mjperpinosa stumasy add_into_dictionary.php add_definition cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-14751
CVE-2026-14751MEDIUM
mjperpinosa stumasy search_scratch_data.php search_scratch_data sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14750
CVE-2026-14750MEDIUM
mjperpinosa stumasy accessing_dictionary_authorization.php accessing_dictionary_authorization sql injection
33RIESGO
abrir ↗
Referência
CVE-2015-8420
CVE-2015-8420—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RIESGO
abrir ↗
Referência
CVE-2020-12029
CVE-2020-12029CRITICAL
Rockwell Automation FactoryTalk View SE
75RIESGO
abrir ↗
← anteriorpágina 273 / 723siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.