Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.900exploits catalogados
35.840CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.600 exploits
Referência
CVE-2026-5314
CVE-2026-5314MEDIUM
Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2010-2915
CVE-2010-2915—
SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-2915
CVE-2010-2915—
SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2008-5336
CVE-2008-5336—
SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection
CVE-2008-2343—webappsphp
News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fastpublish CMS 1.9999 - Local File Inclusion / SQL Injection
CVE-2008-4519—webappsphp
Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute a
23RIESGO
abrir ↗
Referência
CVE-2009-4625
CVE-2009-4625—
SQL injection vulnerability in the updateOnePage function in components/com_bfsurvey_pro/controller.php in BF Survey Pro
23RIESGO
abrir ↗
Referência
CVE-2015-4072
CVE-2015-4072—
Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote att
23RIESGO
abrir ↗
Referência
CVE-2024-8673
CVE-2024-8673CRITICAL
Z-Downloads < 1.11.7 - Admin+ Stored XSS via SVG Upload
63RIESGO
abrir ↗
Referência
CVE-2012-4873
CVE-2012-4873—
Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2010-1877
CVE-2010-1877—
SQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2012-5330
CVE-2012-5330—
Multiple cross-site scripting (XSS) vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre Simple CMS - Authentication Bypass
CVE-2008-5058—webappsphp
SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2026-5312
CVE-2026-5312MEDIUM
D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control
33RIESGO
abrir ↗
Referência
CVE-2010-1878
CVE-2010-1878—
Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to
43RIESGO
abrir ↗
Referência
CVE-2013-1466
CVE-2013-1466—
Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência
CVE-2013-1466
CVE-2013-1466—
Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPIndexPage 1.0.1 - 'config.php' Remote File Inclusion
CVE-2007-0499—webappsphp
PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WinPcap 4.0 - 'NPF.SYS' Local Privilege Escalation
CVE-2007-3681—localwindows
The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component SimpleFAQ 2.11 - SQL Injection
CVE-2007-4456—webappsphp
SQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for Mambo allows remote attacke
23RIESGO
abrir ↗
Referência✓ VexDay Proof
xKiosk 3.0.1i - 'xkurl.php?PEARPATH' Remote File Inclusion
CVE-2007-5314—webappsphp
PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when register_globals is enabled
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XZero Community Classifieds 4.95.11 - Local File Inclusion / SQL Injection
CVE-2007-6566—webappsphp
SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to ex
23RIESGO
abrir ↗
Referência
CVE-2010-1043
CVE-2010-1043—
Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary lo
23RIESGO
abrir ↗
Referência
CVE-2009-4957
CVE-2009-4957—
Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary file
23RIESGO
abrir ↗
Referência
CVE-2009-4683
CVE-2009-4683—
Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-3822
CVE-2009-3822—
PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Kmita Tellfriend 2.0 - 'file' Remote File Inclusion
CVE-2008-2198—webappsphp
PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when regi
23RIESGO
abrir ↗
Referência
CVE-2018-8908
CVE-2018-8908—
An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CS
23RIESGO
abrir ↗
Referência
CVE-2019-3501
CVE-2019-3501—
The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards pag
23RIESGO
abrir ↗
Referência
CVE-2010-2336
CVE-2010-2336—
index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the
23RIESGO
abrir ↗
← anteriorpágina 629 / 754siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.