Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.401exploits catalogados

35.511CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.332GitHub PoC 14.209VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.301 exploits

Referência

CVE-2011-0515

CVE-2011-0515—

KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (c

23RIESGO

abrir ↗

Referência

CVE-2013-2097

CVE-2013-2097—

ZPanel through 10.1.0 has Remote Command Execution

43RIESGO

abrir ↗

Referência

CVE-2026-9584

CVE-2026-9584MEDIUM

code-projects Project Management System Login chk.php sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Linux Kernel 2.6.23 < 2.6.24 - 'vmsplice' Local Privilege Escalation (1)

CVE-2008-0010—locallinux

The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certai

23RIESGO

abrir ↗

Referência

CVE-2018-7602

CVE-2018-7602CRITICALbajo ataqueransomware

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RIESGO

abrir ↗

Referência

CVE-2013-2751

CVE-2013-2751—

Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator

60RIESGO

abrir ↗

Referência

CVE-2011-0519

CVE-2011-0519—

SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows

23RIESGO

abrir ↗

Referência

CVE-2026-13567

CVE-2026-13567MEDIUM

code-projects Online Music Site POST Request Feedback.php cross site scripting

33RIESGO

abrir ↗

Referência✓ VexDay Proof

samPHPweb 4.2.2 - 'songinfo.php' SQL Injection

CVE-2008-0187—webappsphp

SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote atta

23RIESGO

abrir ↗

Referência

CVE-2018-8174

CVE-2018-8174HIGHbajo ataqueransomware

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

93RIESGO

abrir ↗

Referência

CVE-2026-40524

CVE-2026-40524HIGH

FrontAccounting < 2.4.20 SQL Injection via get_gl_transactions()

41RIESGO

abrir ↗

Referência

CVE-2026-8289

CVE-2026-8289MEDIUM

Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Binn SBuilder - 'nid' Blind SQL Injection

CVE-2008-0253—webappsphp

SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.02 - 'Username' SQL Injection

CVE-2008-0254—webappsphp

SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is disa

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ASP Photo Gallery 1.0 - Multiple SQL Injections

CVE-2008-0256—webappsasp

Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência

CVE-2026-13561

CVE-2026-13561MEDIUM

Edimax EW-7478APC POST Request formiNICbasic os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-13554

CVE-2026-13554MEDIUM

itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-13553

CVE-2026-13553MEDIUM

itsourcecode Online Hotel Management System controller.php add unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2011-0611

CVE-2011-0611HIGHbajo ataque

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; A

100RIESGO

abrir ↗

Referência

CVE-2013-3214

CVE-2013-3214—

vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

60RIESGO

abrir ↗

Referência

CVE-2026-13549

CVE-2026-13549MEDIUM

CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization

33RIESGO

abrir ↗

Referência

CVE-2026-13546

CVE-2026-13546MEDIUM

Feehi CMS REST API Endpoint articles missing authentication

33RIESGO

abrir ↗

Referência

CVE-2011-0900

CVE-2011-0900—

Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150

23RIESGO

abrir ↗

Referência

CVE-2011-0903

CVE-2011-0903—

Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitra

23RIESGO

abrir ↗

Referência

CVE-2013-4211

CVE-2013-4211—

A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, wh

60RIESGO

abrir ↗

Referência

CVE-2026-6600

CVE-2026-6600MEDIUM

langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-6599

CVE-2026-6599MEDIUM

langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injection

33RIESGO

abrir ↗

Referência

CVE-2026-6598

CVE-2026-6598MEDIUM

langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file

33RIESGO

abrir ↗

Referência

CVE-2026-5633

CVE-2026-5633MEDIUM

assafelovic gpt-researcher ws Endpoint server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2013-4694

CVE-2013-4694—

Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.