Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.866exploits catalogados
35.812CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.549 exploits
Referência
CVE-2015-7767
CVE-2015-7767—
Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of
23RIESGO
abrir ↗
Referência
CVE-2017-11322
CVE-2017-11322—
The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileg
23RIESGO
abrir ↗
Referência
CVE-2014-9260
CVE-2014-9260—
The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users
28RIESGO
abrir ↗
Referência
CVE-2026-6118
CVE-2026-6118MEDIUM
AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection
48RIESGO
abrir ↗
Referência
CVE-2019-0543
CVE-2019-0543HIGHbajo ataqueransomware
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft W
71RIESGO
abrir ↗
Referência
CVE-2018-5725
CVE-2018-5725—
MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of t
23RIESGO
abrir ↗
Referência
CVE-2018-5725
CVE-2018-5725—
MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Achievo 1.3.2 - 'FCKeditor' Arbitrary File Upload
CVE-2008-2742—webappsphp
Unrestricted file upload in the mcpuk file editor (atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Electronics Workbench - '.ewb' Local Stack Overflow (PoC)
CVE-2008-5383—doswindows
Stack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a deni
23RIESGO
abrir ↗
Referência
CVE-2011-3487
CVE-2011-3487—
Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2019-10846
CVE-2019-10846—
Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and passw
23RIESGO
abrir ↗
Referência
CVE-2016-1793
CVE-2016-1793—
AppleGraphicsDeviceControlClient in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged
23RIESGO
abrir ↗
Referência
CVE-2016-1793
CVE-2016-1793—
AppleGraphicsDeviceControlClient in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged
23RIESGO
abrir ↗
Referência
CVE-2022-45639
CVE-2022-45639HIGH
OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a cra
41RIESGO
abrir ↗
Referência
CVE-2026-3485
CVE-2026-3485CRITICAL
D-Link DIR-868L SSDP Service sub_1BF84 os command injection
48RIESGO
abrir ↗
Referência
CVE-2015-2682
CVE-2015-2682—
Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via
28RIESGO
abrir ↗
Referência
CVE-2014-9142
CVE-2014-9142—
Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2014-9142
CVE-2014-9142—
Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2015-2682
CVE-2015-2682—
Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via
28RIESGO
abrir ↗
Referência
CVE-2024-0204
CVE-2024-0204CRITICAL
Authentication Bypass in GoAnywhere MFT
85RIESGO
abrir ↗
Referência
CVE-2012-5875
CVE-2012-5875—
Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (1
28RIESGO
abrir ↗
Referência
CVE-2019-12962
CVE-2019-12962—
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.
38RIESGO
abrir ↗
Referência
CVE-2017-11661
CVE-2017-11661—
The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory
28RIESGO
abrir ↗
Referência
CVE-2013-3075
CVE-2013-3075—
Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities
28RIESGO
abrir ↗
Referência
CVE-2012-0781
CVE-2012-0781—
The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer derefere
28RIESGO
abrir ↗
Referência
CVE-2018-19125
CVE-2018-19125—
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.
28RIESGO
abrir ↗
Referência
CVE-2019-1674
CVE-2019-1674HIGH
Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability
46RIESGO
abrir ↗
Referência
CVE-2017-20216
CVE-2017-20216CRITICAL
FLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command Injection
53RIESGO
abrir ↗
Referência
CVE-2014-9349
CVE-2014-9349—
Multiple cross-site scripting (XSS) vulnerabilities in admin/robots.lib.php in RobotStats 1.0 allow remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2026-16064
CVE-2026-16064MEDIUM
Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event
33RIESGO
abrir ↗
← anteriorpágina 594 / 752siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.