Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.866exploits catalogados
35.812CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.549 exploits
Referência
CVE-2010-4925
CVE-2010-4925—
SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2010-4926
CVE-2010-4926—
SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2014-6242
CVE-2014-6242—
Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow
23RIESGO
abrir ↗
Referência
CVE-2017-20275
CVE-2017-20275HIGH
Joomla! Component PHP-Bridge 1.2.3 SQL Injection via id Parameter
41RIESGO
abrir ↗
Referência
CVE-2022-0847
CVE-2022-0847HIGHbajo ataque
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RIESGO
abrir ↗
Referência
CVE-2015-4066
CVE-2015-4066—
Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow rem
23RIESGO
abrir ↗
Referência
CVE-2015-4066
CVE-2015-4066—
Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow rem
23RIESGO
abrir ↗
Referência
CVE-2022-0847
CVE-2022-0847HIGHbajo ataque
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RIESGO
abrir ↗
Referência
CVE-2016-6707
CVE-2016-6707—
An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 coul
23RIESGO
abrir ↗
Referência
CVE-2017-20274
CVE-2017-20274HIGH
Joomla LMS King Professional 3.2.4.0 SQL Injection via learningpath
41RIESGO
abrir ↗
Referência
CVE-2014-2023
CVE-2014-2023—
Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allo
23RIESGO
abrir ↗
Referência
CVE-2017-20273
CVE-2017-20273HIGH
Joomla Event Registration Pro Calendar 4.1.3 SQL Injection
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Studio Lounge Address Book 2.5 - 'profile' Arbitrary File Upload
CVE-2009-1483—webappsphp
Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable
23RIESGO
abrir ↗
Referência
CVE-2019-0836
CVE-2019-0836—
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak
23RIESGO
abrir ↗
Referência
CVE-2019-0836
CVE-2019-0836—
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak
23RIESGO
abrir ↗
Referência
CVE-2017-11567
CVE-2017-11567—
Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VS-News-System 1.2.1 - 'newsordner' Remote File Inclusion
CVE-2007-1017—webappsphp
PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PrecisionID Barcode ActiveX 1.3 - Denial of Service
CVE-2007-2657—doswindows
Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EZContents CMS 2.0.0 - Multiple SQL Injections
CVE-2008-2135—webappsphp
Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2015-0554
CVE-2015-0554—
The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly rest
50RIESGO
abrir ↗
Referência
CVE-2010-4928
CVE-2010-4928—
Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allow
23RIESGO
abrir ↗
Referência
CVE-2010-4928
CVE-2010-4928—
Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allow
23RIESGO
abrir ↗
Referência
CVE-2010-4929
CVE-2010-4929—
SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2013-5978
CVE-2013-5978—
Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPr
23RIESGO
abrir ↗
Referência
CVE-2013-5219
CVE-2013-5219—
Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrar
23RIESGO
abrir ↗
Referência
CVE-2007-3340
CVE-2007-3340—
BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a
23RIESGO
abrir ↗
Referência
CVE-2012-5861
CVE-2012-5861—
Sinapsi eSolar SQL Injection
41RIESGO
abrir ↗
Referência
CVE-2026-14938
CVE-2026-14938MEDIUM
FluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOR
33RIESGO
abrir ↗
Referência
CVE-2015-1318
CVE-2015-1318—
The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf
38RIESGO
abrir ↗
Referência
CVE-2015-1318
CVE-2015-1318—
The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf
38RIESGO
abrir ↗
← anteriorpágina 605 / 752siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.