Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.647exploits catalogados
34.986CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8571Nuclei 4248Metasploit 3472✓ solo verificadosrecientespopularesriesgo
21.899 exploits
Referência
CVE-2014-3738
CVE-2014-3738—
Cross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote attackers to inject arbitrary web script or HTML
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SunLight CMS 5.3 - 'root' Remote File Inclusion
CVE-2007-2774—webappsphp
Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗
Referência
CVE-2014-9610
CVE-2014-9610—
Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication an
23RIESGO
abrir ↗
Referência
CVE-2014-9610
CVE-2014-9610—
Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication an
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Bitweaver R2 CMS - Arbitrary File Upload / Disclosure
CVE-2007-6651—webappsphp
Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive infor
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MyBulletinBoard (MyBB) 1.03 - 'misc.php' SQL Injection
CVE-2006-0959—webappsphp
SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
acFTP FTP Server 1.4 - 'USER' Remote Buffer Overflow (PoC)
CVE-2006-2242—doswindows
acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) ch
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ItCMS 1.9 - 'boxpop.php' Remote Code Execution
CVE-2008-2192—webappsphp
Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inje
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Jokesite 2.0 - 'cat_id' SQL Injection
CVE-2008-2457—webappsphp
SQL injection vulnerability in jokes_category.php in PHP-Jokesite 2.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service (PoC)
CVE-2008-4380—doshardware
The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HT
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Google Chrome - 'ChromeHTML://' Remote Parameter Injection
CVE-2008-5749—remotewindows
Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Siemens C450IP/C475IP - Remote Denial of Service
CVE-2008-7065—doshardware
Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and dev
23RIESGO
abrir ↗
Referência
CVE-2010-5239
CVE-2010-5239—
Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users
23RIESGO
abrir ↗
Referência
CVE-2011-0049
CVE-2011-0049—
Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allo
60RIESGO
abrir ↗
Referência
CVE-2018-14888
CVE-2018-14888—
inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or threa
23RIESGO
abrir ↗
Referência
CVE-2018-14888
CVE-2018-14888—
inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or threa
23RIESGO
abrir ↗
Referência
CVE-2013-1604
CVE-2013-1604—
Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2018-5405
CVE-2018-5405—
The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.
23RIESGO
abrir ↗
Referência
CVE-2026-66752
CVE-2026-66752MEDIUM
tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling
33RIESGO
abrir ↗
Referência
CVE-2023-3848
CVE-2023-3848LOW
mooSocial mooDating URL view cross site scripting
43RIESGO
abrir ↗
Referência
CVE-2017-8708
CVE-2017-8708—
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server
23RIESGO
abrir ↗
Referência✓ VexDay Proof
@lex Guestbook 4.0.2 - Remote Command Execution
CVE-2007-0202—webappsphp
SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows
23RIESGO
abrir ↗
Referência
CVE-2019-16173
CVE-2019-16173—
LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example,
23RIESGO
abrir ↗
Referência
CVE-2022-2841
CVE-2022-2841LOW
CrowdStrike Falcon Uninstallation authorization
28RIESGO
abrir ↗
Referência
CVE-2014-2340
CVE-2014-2340—
Cross-site request forgery (CSRF) vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2015-7567
CVE-2015-7567—
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passw
23RIESGO
abrir ↗
Referência
CVE-2015-7567
CVE-2015-7567—
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passw
23RIESGO
abrir ↗
Referência
CVE-2021-21465
CVE-2021-21465CRITICAL
The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the b
48RIESGO
abrir ↗
Referência✓ VexDay Proof
JBlog 1.0 - Create / Delete Admin Authentication Bypass
CVE-2007-3974—webappsphp
admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accou
23RIESGO
abrir ↗
Referência
CVE-2018-14840
CVE-2018-14840—
uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for exam
23RIESGO
abrir ↗
← anteriorpágina 373 / 730siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.