Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.724exploits catalogados

35.724CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8703Nuclei 4314Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.407 exploits

Referência

CVE-2016-6897

CVE-2016-6897—

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.

43RIESGO

abrir ↗

Referência

CVE-2018-7171

CVE-2018-7171—

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of a

28RIESGO

abrir ↗

Referência

CVE-2018-7171

CVE-2018-7171—

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of a

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.03a - Local Inclusion / Arbitrary File Corruption

CVE-2009-2177—webappsphp

code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to con

23RIESGO

abrir ↗

Referência

CVE-2020-9375

CVE-2020-9375—

TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a

28RIESGO

abrir ↗

Referência

CVE-2010-0696

CVE-2010-0696—

Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 throug

43RIESGO

abrir ↗

Referência

CVE-2009-4200

CVE-2009-4200—

SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote attackers to execute a

23RIESGO

abrir ↗

Referência

CVE-2009-4203

CVE-2009-4203—

Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

CVE-2009-2181—webappsphp

Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attac

23RIESGO

abrir ↗

Referência

CVE-2011-1137

CVE-2011-1137—

Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a deni

28RIESGO

abrir ↗

Referência

CVE-2018-4063

CVE-2018-4063HIGHbajo ataque

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES4

76RIESGO

abrir ↗

Referência

CVE-2019-11229

CVE-2019-11229—

models/repo_mirror.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 mishandles mirror repo URL settings, leading to rem

35RIESGO

abrir ↗

Referência✓ VexDay Proof

patBBcode 1.0 - 'bbcodeSource.php' Remote File Inclusion

CVE-2007-5995—webappsphp

PHP remote file inclusion vulnerability in examples/patExampleGen/bbcodeSource.php in patBBcode 1.0 allows remote attack

23RIESGO

abrir ↗

Referência

CVE-2022-20705

CVE-2022-20705CRITICAL

Cisco Small Business RV Series Routers Vulnerabilities

85RIESGO

abrir ↗

Referência

CVE-2017-16562

CVE-2017-16562—

The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers

28RIESGO

abrir ↗

Referência

CVE-2019-0567

CVE-2019-0567—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RIESGO

abrir ↗

Referência

CVE-2015-8644

CVE-2015-8644—

Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on

28RIESGO

abrir ↗

Referência

CVE-2016-0985

CVE-2016-0985—

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on

28RIESGO

abrir ↗

Referência

CVE-2013-3522

CVE-2013-3522—

SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier

43RIESGO

abrir ↗

Referência

CVE-2018-7750

CVE-2018-7750—

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x

28RIESGO

abrir ↗

Referência

CVE-2023-2745

CVE-2023-2745MEDIUM

WordPress Core < 6.2.1 - Directory Traversal

70RIESGO

abrir ↗

Referência

Sahi pro 8.x - Directory Traversal

CVE-2019-13063—webappsmultiple

Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the sc

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Toko Instan 7.6 - Multiple SQL Injections

CVE-2007-6004—webappsphp

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência

CVE-2013-4810

CVE-2013-4810CRITICALbajo ataque

HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle

100RIESGO

abrir ↗

Referência

CVE-2017-8295

CVE-2017-8295—

WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for re

28RIESGO

abrir ↗

Referência

CVE-2019-3948

CVE-2019-3948—

The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0

28RIESGO

abrir ↗

Referência

CVE-2010-3138

CVE-2010-3138—

Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to

28RIESGO

abrir ↗

Referência

CVE-2013-6719

CVE-2013-6719—

delivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2

28RIESGO

abrir ↗

Referência

CVE-2015-8634

CVE-2015-8634—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and

28RIESGO

abrir ↗

Referência

CVE-2010-4862

CVE-2010-4862—

SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote at

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.