Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.866exploits catalogados
35.812CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.549 exploits
Referência
CVE-2014-2072
CVE-2014-2072—
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
23RIESGO
abrir ↗
Referência
CVE-2014-2084
CVE-2014-2084—
Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly re
23RIESGO
abrir ↗
Referência
CVE-2014-2399
CVE-2014-2399—
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2014-2424
CVE-2014-2424—
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote
50RIESGO
abrir ↗
Referência
CVE-2014-2534
CVE-2014-2534—
/sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by rea
23RIESGO
abrir ↗
Referência
CVE-2014-2575
CVE-2014-2575—
Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebFor
23RIESGO
abrir ↗
Referência
CVE-2014-2575
CVE-2014-2575—
Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebFor
23RIESGO
abrir ↗
Referência
CVE-2009-3492
CVE-2009-3492—
Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2009-3502
CVE-2009-3502—
SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2026-7385
CVE-2026-7385MEDIUM
Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure
33RIESGO
abrir ↗
Referência
CVE-2023-21839
CVE-2023-21839HIGHbajo ataque
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RIESGO
abrir ↗
Referência
CVE-2015-1724
CVE-2015-1724—
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista S
23RIESGO
abrir ↗
Referência
CVE-2009-4876
CVE-2009-4876—
admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the ci
23RIESGO
abrir ↗
Referência
CVE-2009-4883
CVE-2009-4883—
SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2015-2097
CVE-2015-2097—
Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary c
28RIESGO
abrir ↗
Referência
CVE-2009-4889
CVE-2009-4889—
SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2015-2184
CVE-2015-2184—
ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls th
23RIESGO
abrir ↗
Referência
CVE-2015-2216
CVE-2015-2216—
SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2022-47966
CVE-2022-47966CRITICALbajo ataqueransomware
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due
100RIESGO
abrir ↗
Referência
CVE-2022-47966
CVE-2022-47966CRITICALbajo ataqueransomware
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due
100RIESGO
abrir ↗
Referência
CVE-2022-47966
CVE-2022-47966CRITICALbajo ataqueransomware
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Windows Server 2000 - UPNP 'getdevicelist' Memory Leak Denial of Service
CVE-2005-3644—doswindows
PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 a
35RIESGO
abrir ↗
Referência
CVE-2014-2994
CVE-2014-2994—
Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to exec
28RIESGO
abrir ↗
Referência
CVE-2014-2994
CVE-2014-2994—
Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to exec
28RIESGO
abrir ↗
Referência
CVE-2009-4988
CVE-2009-4988—
Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote atta
50RIESGO
abrir ↗
Referência
CVE-2014-3138
CVE-2014-3138—
SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1
23RIESGO
abrir ↗
Referência
CVE-2014-3220
CVE-2014-3220—
F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary u
28RIESGO
abrir ↗
Referência
CVE-2016-10033
CVE-2016-10033CRITICALbajo ataque
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RIESGO
abrir ↗
Referência
CVE-2021-47981
CVE-2021-47981MEDIUM
Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form
33RIESGO
abrir ↗
Referência
CVE-2026-1184
CVE-2026-1184MEDIUM
Deserialization of Untrusted Data in GitLab
33RIESGO
abrir ↗
← anteriorpágina 597 / 752siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.