Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.449exploits catalogados
35.552CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.301 exploits
Referência
CVE-2014-8948
CVE-2014-8948—
Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows re
23RIESGO
abrir ↗
Referência
CVE-2014-8948
CVE-2014-8948—
Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component com_Musica - 'id' SQL Injection
CVE-2008-6234—webappsphp
SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SFS EZ Software - 'id' SQL Injection
CVE-2008-6237—webappsphp
SQL injection vulnerability in software-description.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote at
23RIESGO
abrir ↗
Referência
snapd < 2.37 (Ubuntu) - 'dirty_sock' Local Privilege Escalation (1)
CVE-2019-7304HIGHlocallinux
Local privilege escalation via snapd socket
53RIESGO
abrir ↗
Referência
CVE-2019-7440
CVE-2019-7440—
JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_S
23RIESGO
abrir ↗
Referência
CVE-2019-8452
CVE-2019-8452—
A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security clien
23RIESGO
abrir ↗
Referência
CVE-2011-4809
CVE-2011-4809—
Multiple cross-site scripting (XSS) vulnerabilities in the HM Community (com_hmcommunity) component before 1.01 for Joom
23RIESGO
abrir ↗
Referência
CVE-2014-9178
CVE-2014-9178—
Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plu
23RIESGO
abrir ↗
Referência
CVE-2014-9178
CVE-2014-9178—
Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plu
23RIESGO
abrir ↗
Referência
CVE-2014-9195
CVE-2014-9195—
Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function
85RIESGO
abrir ↗
Referência
CVE-2026-9475
CVE-2026-9475CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injection
48RIESGO
abrir ↗
Referência✓ VexDay Proof
Multiple Membership Script 2.5 - 'id' SQL Injection
CVE-2008-6362—webappsphp
SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2026-9474
CVE-2026-9474MEDIUM
yashpokharna2555 StudentManagementSystem studentdel.php confirm_logged_in sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9473
CVE-2026-9473MEDIUM
c-rick jimeng-mcp api.ts generateVideo path traversal
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Affiliate Software Java 4.0 - Authentication Bypass
CVE-2008-6366—webappsasp
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2014-9418
CVE-2014-9418—
The eSpace Meeting ActiveX control (eSpaceStatusCtrl.dll) in Huawei eSpace Desktop before V200R001C03 allows local users
23RIESGO
abrir ↗
Referência
CVE-2014-9439
CVE-2014-9439—
Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BosClassifieds - 'cat_id' SQL Injection
CVE-2008-6526—webappsphp
SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2026-41949
CVE-2026-41949HIGH
Dify < 1.14.2 Authorization Bypass via File Preview Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-16229
CVE-2026-16229MEDIUM
itsourcecode Courier Management System index.php cross site scripting
33RIESGO
abrir ↗
Referência
eBrigade ERP 4.5 - Arbitrary File Download
CVE-2019-9622—webappsphp
eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as d
23RIESGO
abrir ↗
Referência
CVE-2019-9670
CVE-2019-9670CRITICALbajo ataque
mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XX
100RIESGO
abrir ↗
Referência
CVE-2019-9670
CVE-2019-9670CRITICALbajo ataque
mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XX
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.mp3' Buffer Overflow (SEH)
CVE-2019-9766—localwindows_x86
Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wma' Local Buffer Overflow (SEH)
CVE-2019-9767—localwindows_x86
Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to
23RIESGO
abrir ↗
Referência
AirDrop 2.0 - Denial of Service (DoS)
CVE-2019-9832—dosandroid
The AirDrop application through 2.0 for Android allows remote attackers to cause a denial of service via a client that m
23RIESGO
abrir ↗
Referência
NetData 1.13.0 - HTML Injection
CVE-2019-9834—webappsmultiple
The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an impor
23RIESGO
abrir ↗
Referência
CVE-2019-9978
CVE-2019-9978MEDIUMbajo ataque
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_optio
100RIESGO
abrir ↗
Referência
CVE-2011-5103
CVE-2011-5103—
SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
← anteriorpágina 467 / 744siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.