Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.866exploits catalogados
35.812CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.549 exploits
Referência
CVE-2014-0997
CVE-2014-0997—
WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2 as used i
23RIESGO
abrir ↗
Referência
CVE-2014-0999
CVE-2014-0999—
Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive
23RIESGO
abrir ↗
Referência
CVE-2014-100017
CVE-2014-100017—
Cross-site scripting (XSS) vulnerability in canned_opr.php in PhpOnlineChat 3.0 allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência
CVE-2009-2609
CVE-2009-2609—
SQL injection vulnerability in the amoCourse (com_amocourse) component for Joomla! allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2009-2611
CVE-2009-2611—
Directory traversal vulnerability in infusions/last_seen_users_panel/last_seen_users_panel.php in MyFusion (aka MyF) 6 B
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LushiNews 1.01 - 'comments.php' SQL Injection
CVE-2007-0865—webappsphp
SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject ar
23RIESGO
abrir ↗
Referência
CVE-2021-22986
CVE-2021-22986CRITICALbajo ataqueransomware
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.
100RIESGO
abrir ↗
Referência
CVE-2014-10014
CVE-2014-10014—
Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attacke
23RIESGO
abrir ↗
Referência
CVE-2014-10023
CVE-2014-10023—
Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2014-10023
CVE-2014-10023—
Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2014-1202
CVE-2014-1202—
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a c
23RIESGO
abrir ↗
Referência
CVE-2009-2735
CVE-2009-2735—
SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote at
23RIESGO
abrir ↗
Referência
CVE-2009-2774
CVE-2009-2774—
SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2009-2775
CVE-2009-2775—
SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2009-2788
CVE-2009-2788—
Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2009-4862
CVE-2009-4862—
Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the i
23RIESGO
abrir ↗
Referência
CVE-2014-2045
CVE-2014-2045—
Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30
23RIESGO
abrir ↗
Referência
CVE-2014-2072
CVE-2014-2072—
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
23RIESGO
abrir ↗
Referência
CVE-2014-2084
CVE-2014-2084—
Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly re
23RIESGO
abrir ↗
Referência
CVE-2014-2399
CVE-2014-2399—
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2014-2424
CVE-2014-2424—
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote
50RIESGO
abrir ↗
Referência
CVE-2014-2534
CVE-2014-2534—
/sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by rea
23RIESGO
abrir ↗
Referência
CVE-2014-2575
CVE-2014-2575—
Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebFor
23RIESGO
abrir ↗
Referência
CVE-2014-2575
CVE-2014-2575—
Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebFor
23RIESGO
abrir ↗
Referência
CVE-2009-3492
CVE-2009-3492—
Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2009-3502
CVE-2009-3502—
SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2026-7385
CVE-2026-7385MEDIUM
Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure
33RIESGO
abrir ↗
Referência
CVE-2023-21839
CVE-2023-21839HIGHbajo ataque
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RIESGO
abrir ↗
Referência
CVE-2015-1724
CVE-2015-1724—
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista S
23RIESGO
abrir ↗
Referência
CVE-2009-4876
CVE-2009-4876—
admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the ci
23RIESGO
abrir ↗
← anteriorpágina 603 / 752siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.