Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.266 exploits
Referência
CVE-2018-25247
CVE-2018-25247MEDIUM
MyBB Like Plugin 3.0.0 Cross-Site Scripting via User Profiles
33RIESGO
abrir ↗
Referência
CVE-2018-25245
CVE-2018-25245HIGH
7 Tik 1.0.1.0 Denial of Service via Search
41RIESGO
abrir ↗
Referência
CVE-2018-25244
CVE-2018-25244MEDIUM
Eco Search 1.0.2.0 Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2018-25243
CVE-2018-25243MEDIUM
FastTube 1.0.1.0 Denial of Service via Search
33RIESGO
abrir ↗
Referência
CVE-2018-25242
CVE-2018-25242MEDIUM
One Search 1.1.0.0 Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2018-25241
CVE-2018-25241HIGH
VPN Browser+ 1.1.0.0 Denial of Service
41RIESGO
abrir ↗
Referência
CVE-2018-10068
CVE-2018-10068—
The jDownloads extension before 3.2.59 for Joomla! has XSS.
23RIESGO
abrir ↗
Referência
CVE-2018-10077
CVE-2018-10077—
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to re
23RIESGO
abrir ↗
Referência
CVE-2018-10078
CVE-2018-10078—
Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to i
23RIESGO
abrir ↗
Referência
CVE-2018-10253
CVE-2018-10253—
Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.
23RIESGO
abrir ↗
Referência
CVE-2018-10256
CVE-2018-10256—
A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privile
23RIESGO
abrir ↗
Referência
CVE-2018-10259
CVE-2018-10259—
An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged u
23RIESGO
abrir ↗
Referência
CVE-2018-10259
CVE-2018-10259—
An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged u
23RIESGO
abrir ↗
Referência
CVE-2018-10311
CVE-2018-10311—
A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência
CVE-2010-4983
CVE-2010-4983—
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-4983
CVE-2010-4983—
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2018-10712
CVE-2018-10712—
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RIESGO
abrir ↗
Referência
CVE-2010-4985
CVE-2010-4985—
Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to in
23RIESGO
abrir ↗
Referência
CVE-2010-4985
CVE-2010-4985—
Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to in
23RIESGO
abrir ↗
Referência
CVE-2010-4986
CVE-2010-4986—
SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2026-13573
CVE-2026-13573MEDIUM
llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-13572
CVE-2026-13572MEDIUM
itsourcecode Hospital Management System insertbillingrecord.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB ezBoard Converter 0.2 - 'ezconvert_dir' Remote File Inclusion
CVE-2007-0761—webappsphp
PHP remote file inclusion vulnerability in config.php in phpBB ezBoard converter (ezconvert) 0.2 allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB++ Build 100 - 'phpbb_root_path' Remote File Inclusion
CVE-2007-0762—webappsphp
PHP remote file inclusion vulnerability in includes/functions.php in phpBB++ Build 100 allows remote attackers to execut
23RIESGO
abrir ↗
Referência
CVE-2018-10809
CVE-2018-10809—
In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD)
23RIESGO
abrir ↗
Referência
CVE-2018-10830
CVE-2018-10830—
In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of serv
23RIESGO
abrir ↗
Referência
CVE-2018-10933
CVE-2018-10933CRITICAL
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RIESGO
abrir ↗
Referência
CVE-2026-4992
CVE-2026-4992MEDIUM
wandb OpenUI HTMLAnnotator server.py get_share HTML injection
33RIESGO
abrir ↗
Referência
CVE-2026-4988
CVE-2026-4988MEDIUM
Open5GS CCA Message smf_s6b denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-4976
CVE-2026-4976HIGH
Totolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow
41RIESGO
abrir ↗
← anteriorpágina 435 / 743siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.