Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados

34.679CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

21.692 exploits

Referência

CVE-2016-20037

CVE-2016-20037HIGH

xwpe 1.5.30a-2.1 Stack-based Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2026-4996

CVE-2026-4996MEDIUM

Sinaptik AI PandasAI pandasai-lancedb Extension lancedb.py get_relevant_docs_by_id sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-4995

CVE-2026-4995MEDIUM

wandb OpenUI Window Message Event index.html cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-4994

CVE-2026-4994MEDIUM

wandb OpenUI APIStatusError server.py generic_exception_handler information exposure

33RIESGO

abrir ↗

Referência

CVE-2026-4993

CVE-2026-4993MEDIUM

wandb OpenUI config.py hard-coded credentials

33RIESGO

abrir ↗

Referência

CVE-2025-15445

CVE-2025-15445MEDIUM

Restaurant Cafeteria <= 0.4.6 - Subscriber+ Arbitrary Plugin Installation/Activation

33RIESGO

abrir ↗

Referência

CVE-2026-9709

CVE-2026-9709HIGH

Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure

41RIESGO

abrir ↗

Referência

CVE-2026-66028

CVE-2026-66028HIGH

Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email

41RIESGO

abrir ↗

Referência

CVE-2012-3810

CVE-2012-3810—

Samsung Kies before 2.5.0.12094_27_11 has registry modification.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow

CVE-2007-3876—localosx

Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long

23RIESGO

abrir ↗

Referência

CVE-2012-3835

CVE-2012-3835—

Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Pictures Rating - 'index.php?msgid' SQL Injection

CVE-2007-3881—webappsphp

SQL injection vulnerability in index.php in Pictures Rating (Picture Rating) allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Expert Advisior - 'index.php?id' SQL Injection

CVE-2007-3882—webappsphp

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência

CVE-2012-3839

CVE-2012-3839—

Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2012-3873

CVE-2012-3873—

Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Seditio CMS 121 - 'pfs.php' Arbitrary File Upload

CVE-2007-4057—webappsphp

Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users

23RIESGO

abrir ↗

Referência✓ VexDay Proof

VMware Inc 6.0.0 - 'vielib.dll 2.2.5.42958' Remode Code Execution

CVE-2007-4058—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows

28RIESGO

abrir ↗

Referência

CVE-2012-4279

CVE-2012-4279—

Multiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Referência

CVE-2026-66730

CVE-2026-66730HIGH

facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser

41RIESGO

abrir ↗

Referência

CVE-2012-4280

CVE-2012-4280—

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote

23RIESGO

abrir ↗

Referência

CVE-2026-66729

CVE-2026-66729HIGH

facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser

41RIESGO

abrir ↗

Referência✓ VexDay Proof

VMware Inc 6.0.0 - CreateProcess Remote Code Execution

CVE-2007-4155—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attac

23RIESGO

abrir ↗

Referência

CVE-2012-4361

CVE-2012-4361—

lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to exe

50RIESGO

abrir ↗

Referência

CVE-2026-17531

CVE-2026-17531LOW

unitedbyai droidclaw Unsigned Scheduled Callback goals.ts authorization

28RIESGO

abrir ↗

Referência

CVE-2026-17530

CVE-2026-17530MEDIUM

AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization

33RIESGO

abrir ↗

Referência

CVE-2026-17529

CVE-2026-17529MEDIUM

AstrBotDevs AstrBot astr_main_agent.py authorization

33RIESGO

abrir ↗

Referência✓ VexDay Proof

paBugs 2.0 Beta 3 - 'main.php?cid' SQL Injection

CVE-2007-4183—webappsphp

SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FrontAccounting 1.12 build 31 - Remote File Inclusion

CVE-2007-4279—webappsphp

PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execut

45RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP blue dragon CMS 3.0.0 - Remote File Inclusion

CVE-2007-4313—webappsphp

PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 all

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Ncaster 1.7.2 - 'archive.php' Remote File Inclusion

CVE-2007-4320—webappsphp

PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to

45RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.