Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.313exploits catalogados
34.834CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8484Nuclei 4237Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.797 exploits
Referência
CVE-2014-3220
CVE-2014-3220—
F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary u
28RIESGO
abrir ↗
Referência
CVE-2021-24405
CVE-2021-24405—
Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Web Content System 2.7.1 - Remote File Inclusion
CVE-2007-1771—webappsphp
PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content Syste
23RIESGO
abrir ↗
Referência
CVE-2014-125117
CVE-2014-125117CRITICAL
D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE
63RIESGO
abrir ↗
Referência
CVE-2014-125117
CVE-2014-125117CRITICAL
D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE
63RIESGO
abrir ↗
Referência
CVE-2014-125117
CVE-2014-125117CRITICAL
D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE
63RIESGO
abrir ↗
Referência
CVE-2025-7097
CVE-2025-7097CRITICAL
Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection
48RIESGO
abrir ↗
Referência
CVE-2025-7097
CVE-2025-7097CRITICAL
Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-15231
CVE-2026-15231LOW
TaxoPress < 3.51.0 - Contributor+ Private Post Disclosure via IDOR
28RIESGO
abrir ↗
Referência
CVE-2018-12052
CVE-2018-12052—
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.
23RIESGO
abrir ↗
Referência
CVE-2026-14557
CVE-2026-14557CRITICAL
SoftMarket <= 1.0.0 - Unauthenticated Account Takeover via Email Verification Bypass
48RIESGO
abrir ↗
Referência✓ VexDay Proof
Adobe JRun 4 - 'logfile' (Authenticated) Directory Traversal
CVE-2009-1873—remotewindows
Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4
23RIESGO
abrir ↗
Referência
CVE-2024-23749
CVE-2024-23749HIGH
KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insuffic
41RIESGO
abrir ↗
Referência✓ VexDay Proof
eFront 3.5.1 / build 2710 - Arbitrary File Upload
CVE-2008-7026—webappsphp
Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote att
23RIESGO
abrir ↗
Referência
CVE-2026-13340
CVE-2026-13340MEDIUM
SVG Support < 2.5.17 - Author+ Stored XSS via .svgz Sanitization Bypass
33RIESGO
abrir ↗
Referência
CVE-2019-11537
CVE-2019-11537—
In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.ph
23RIESGO
abrir ↗
Referência
CVE-2026-14214
CVE-2026-14214—
Amelia < 2.4.4 - Amelia Manager+ Arbitrary User-Field Modification via Mass Assignment
23RIESGO
abrir ↗
Referência
CVE-2026-14195
CVE-2026-14195—
Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info
23RIESGO
abrir ↗
Referência
CVE-2018-18804
CVE-2018-18804—
Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.
23RIESGO
abrir ↗
Referência
CVE-2018-18804
CVE-2018-18804—
Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.
23RIESGO
abrir ↗
Referência
CVE-2026-13729
CVE-2026-13729—
Podlove Podcast Publisher < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion via CSRF
23RIESGO
abrir ↗
Referência
CVE-2018-13045
CVE-2018-13045—
SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to ex
23RIESGO
abrir ↗
Referência
CVE-2018-13045
CVE-2018-13045—
SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to ex
23RIESGO
abrir ↗
Referência
CVE-2026-13725
CVE-2026-13725—
Dynamic Pricing With Discount Rules for WooCommerce < 5.0.0 - Reflected XSS via wdpAjax
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Cmaps v8.0 - SQL injection
CVE-2023-29809CRITICALwebappsphp
SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbit
53RIESGO
abrir ↗
Referência
CVE-2014-9331
CVE-2014-9331—
Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote
23RIESGO
abrir ↗
Referência
CVE-2014-9331
CVE-2014-9331—
Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote
23RIESGO
abrir ↗
Referência
CVE-2026-13604
CVE-2026-13604—
Pixelavo < 1.5.4 - Unauthenticated Facebook CAPI Event Injection via pixelavo_event AJAX
23RIESGO
abrir ↗
Referência
CVE-2017-6552
CVE-2017-6552—
Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fuju News 1.0 - Authentication Bypass / SQL Injection
CVE-2006-1838—webappsphp
edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie.
23RIESGO
abrir ↗
← anteriorpágina 322 / 727siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.