Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.647exploits catalogados
34.986CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8571Nuclei 4248Metasploit 3472✓ solo verificadosrecientespopularesriesgo
21.899 exploits
Referência
CVE-2011-0644
CVE-2011-0644—
SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2011-0646
CVE-2011-0646—
SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência
CVE-2014-2976
CVE-2014-2976—
Directory traversal vulnerability in Sixnet SixView Manager 2.4.1 allows remote attackers to read arbitrary files via a
23RIESGO
abrir ↗
Referência
CVE-2026-67184
CVE-2026-67184HIGH
TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request
41RIESGO
abrir ↗
Referência
CVE-2023-3049
CVE-2023-3049CRITICAL
File Upload in TMT's Lockcell
48RIESGO
abrir ↗
Referência
CVE-2015-4631
CVE-2015-4631—
Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before
23RIESGO
abrir ↗
Referência
CVE-2015-4631
CVE-2015-4631—
Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before
23RIESGO
abrir ↗
Referência
CVE-2021-44916
CVE-2021-44916—
Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad
23RIESGO
abrir ↗
Referência
CVE-2009-4147
CVE-2009-4147—
The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear t
38RIESGO
abrir ↗
Referência
CVE-2016-3643
CVE-2016-3643HIGHbajo ataque
SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguratio
71RIESGO
abrir ↗
Referência
CVE-2016-3643
CVE-2016-3643HIGHbajo ataque
SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguratio
71RIESGO
abrir ↗
Referência✓ VexDay Proof
TCExam 4.0.011 - 'SessionUserLang' Shell Injection
CVE-2007-2430—webappsphp
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by
23RIESGO
abrir ↗
Referência
CVE-2017-6896
CVE-2017-6896—
Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from
23RIESGO
abrir ↗
Referência
CVE-2017-6896
CVE-2017-6896—
Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from
23RIESGO
abrir ↗
Referência✓ VexDay Proof
2WIRE Modems/Routers - 'CRLF' Denial of Service
CVE-2006-4523—doshardware
The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote at
23RIESGO
abrir ↗
Referência
CVE-2018-20418
CVE-2018-20418—
index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.
23RIESGO
abrir ↗
Referência
CVE-2018-11091
CVE-2018-11091CRITICAL
An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. I
48RIESGO
abrir ↗
Referência✓ VexDay Proof
eIQnetworks ESA SEARCHREPORT - Remote Overflow (Metasploit)
CVE-2007-5699—remotewindows
Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2014-9558
CVE-2014-9558—
Multiple SQL injection vulnerabilities in SmartCMS v.2.
23RIESGO
abrir ↗
Referência
CVE-2015-7346
CVE-2015-7346—
SQL injection vulnerability in ZCMS 1.1.
23RIESGO
abrir ↗
Referência
CVE-2015-7346
CVE-2015-7346—
SQL injection vulnerability in ZCMS 1.1.
23RIESGO
abrir ↗
Referência
CVE-2014-9179
CVE-2014-9179—
Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authe
23RIESGO
abrir ↗
Referência
CVE-2008-7010
CVE-2008-7010—
Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a
23RIESGO
abrir ↗
Referência
CVE-2023-7304
CVE-2023-7304CRITICAL
Ruijie RG-UAC nmc_sync.php Command Injection
48RIESGO
abrir ↗
Referência✓ VexDay Proof
snap - seccomp BBlacklist for TIOCSTI can be Circumvented
CVE-2019-7303MEDIUMdoslinux
Snapd seccomp filter TIOCSTI ioctl bypass
33RIESGO
abrir ↗
Referência✓ VexDay Proof
PolDoc CMS 0.96 - 'download_file.php' File Disclosure
CVE-2007-6400—webappsphp
Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MX-System 2.7.3 - 'index.php' SQL Injection
CVE-2008-2477—webappsphp
SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SkaLinks 1.5 - 'register.php' Arbitrary Add Editor
CVE-2008-7010—webappsphp
Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a
23RIESGO
abrir ↗
Referência
CVE-2022-29851
CVE-2022-29851CRITICAL
documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Inj
48RIESGO
abrir ↗
Referência
CVE-2017-17721
CVE-2017-17721—
CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, ass
23RIESGO
abrir ↗
← anteriorpágina 377 / 730siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.