Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.813exploits catalogados
35.788CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.523 exploits
Referência
CVE-2016-0075
CVE-2016-0075—
The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 160
23RIESGO
abrir ↗
Referência
CVE-2010-4978
CVE-2010-4978—
Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Links Directory 1.1 - 'cat_id' SQL Injection
CVE-2008-1871—webappsphp
SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to ex
23RIESGO
abrir ↗
Referência
CVE-2017-0119
CVE-2017-0119—
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers
28RIESGO
abrir ↗
Referência
CVE-2010-0690
CVE-2010-0690—
SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2021-31673
CVE-2021-31673—
A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remo
23RIESGO
abrir ↗
Referência
CVE-2020-11457
CVE-2020-11457—
pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full n
23RIESGO
abrir ↗
Referência
CVE-2012-6509
CVE-2012-6509—
Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗
Referência
CVE-2015-1389
CVE-2015-1389—
Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote at
23RIESGO
abrir ↗
Referência
CVE-2015-1389
CVE-2015-1389—
Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote at
23RIESGO
abrir ↗
Referência
CVE-2023-2437
CVE-2023-2437CRITICAL
UserPro <= 5.1.1 - Authentication Bypass to Administrator
63RIESGO
abrir ↗
Referência
CVE-2018-10653
CVE-2018-10653—
There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 befor
23RIESGO
abrir ↗
Referência
CVE-2009-2557
CVE-2009-2557—
Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitra
23RIESGO
abrir ↗
Referência
CVE-2017-15639
CVE-2017-15639—
tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the
23RIESGO
abrir ↗
Referência
CVE-2018-8718
CVE-2018-8718—
Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PassWiki 0.9.16 RC3 - 'site_id' Local File Inclusion
CVE-2008-6423—webappsphp
Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XPOZE Pro 3.05 - 'reed' SQL Injection
CVE-2008-1874—webappsphp
SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote authenticated users to
23RIESGO
abrir ↗
Referência
CVE-2010-4985
CVE-2010-4985—
Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to in
23RIESGO
abrir ↗
Referência
CVE-2010-4986
CVE-2010-4986—
SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2010-2329
CVE-2010-2329—
Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist en
23RIESGO
abrir ↗
Referência
CVE-2010-2329
CVE-2010-2329—
Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist en
23RIESGO
abrir ↗
Referência
CVE-2025-34102
CVE-2025-34102CRITICAL
CryptoLog Unauthenticated RCE via SQL Injection and Command Injection
63RIESGO
abrir ↗
Referência
CVE-2016-7387
CVE-2016-7387—
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RIESGO
abrir ↗
Referência
CVE-2025-34102
CVE-2025-34102CRITICAL
CryptoLog Unauthenticated RCE via SQL Injection and Command Injection
63RIESGO
abrir ↗
Referência
CVE-2025-34102
CVE-2025-34102CRITICAL
CryptoLog Unauthenticated RCE via SQL Injection and Command Injection
63RIESGO
abrir ↗
Referência
CVE-2017-2454
CVE-2017-2454—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Referência
CVE-2020-2229
CVE-2020-2229—
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a sto
23RIESGO
abrir ↗
Referência
CVE-2014-8657
CVE-2014-8657—
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows r
23RIESGO
abrir ↗
Referência
CVE-2009-4755
CVE-2009-4755—
Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via
23RIESGO
abrir ↗
Referência
CVE-2009-4755
CVE-2009-4755—
Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via
23RIESGO
abrir ↗
← anteriorpágina 573 / 751siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.