Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.056exploits catalogados
35.925CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8755Nuclei 4333Metasploit 3478✓ solo verificadosrecientespopularesriesgo
22.600 exploits
Referência✓ VexDay Proof
WEBBDOMAIN Polls 1.01 - Authentication Bypass
CVE-2008-6625—webappsphp
SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2021-21972
CVE-2021-21972CRITICALbajo ataqueransomware
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
Referência
CVE-2009-4695
CVE-2009-4695—
SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component com_bayesiannaivefilter 1.1 - Remote File Inclusion
CVE-2006-3962—webappsphp
PHP remote file inclusion vulnerability in administrator/components/com_bayesiannaivefilter/lang.php in the bayesiannaiv
23RIESGO
abrir ↗
Referência
CVE-2010-4955
CVE-2010-4955—
SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2010-1094
CVE-2010-1094—
SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2010-1073
CVE-2010-1073—
SQL injection vulnerability in the jEmbed-Embed Anything (com_jembed) component for Joomla! allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component cropimage 1.0 - Remote File Inclusion
CVE-2006-4363—webappsphp
PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mambo
23RIESGO
abrir ↗
Referência
CVE-2018-25394
CVE-2018-25394HIGH
Kados R10 GreenBee SQL Injection via update_release.php
41RIESGO
abrir ↗
Referência
CVE-2018-25393
CVE-2018-25393HIGH
Navigate CMS 2.8.5 Path Traversal via navigate_download.php
41RIESGO
abrir ↗
Referência
CVE-2018-25392
CVE-2018-25392HIGH
MaxOn ERP Software 8.x-9.x SQL Injection via nomor Parameter
41RIESGO
abrir ↗
Referência✓ VexDay Proof
AvailScript Photo Album - 'pics.php' Multiple Vulnerabilities
CVE-2008-4369—webappsphp
SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AvailScript Article Script - 'articles.php' Multiple Vulnerabilities
CVE-2008-4371—webappsphp
SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2026-9297
CVE-2026-9297MEDIUM
Edimax BR-6428NS POST Request formWlbasic command injection
33RIESGO
abrir ↗
Referência
CVE-2026-9296
CVE-2026-9296MEDIUM
Edimax BR-6428NS POST Request formWlanM system command injection
33RIESGO
abrir ↗
Referência
CVE-2010-3150
CVE-2010-3150—
Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 (314 (MC: 160820)) allows local users, and possibly r
28RIESGO
abrir ↗
Referência
CVE-2026-9570
CVE-2026-9570HIGH
Taskbuilder < 5.0.8 - Reflected XSS via Shortcode
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech MMORPG Zone - 'game_id' SQL Injection
CVE-2008-4460—webappsphp
SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência
CVE-2026-50656
CVE-2026-50656HIGH
Microsoft Defender Elevation of Privilege Vulnerability
46RIESGO
abrir ↗
Referência
CVE-2016-1915
CVE-2016-1915—
Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4
23RIESGO
abrir ↗
Referência
CVE-2016-1960
CVE-2016-1960—
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component 'com_colophon' 1.2 - Remote File Inclusion
CVE-2006-3969—webappsphp
PHP remote file inclusion vulnerability in administrator/components/com_colophon/admin.colophon.php in Colophon 1.2 and
23RIESGO
abrir ↗
Referência
CVE-2026-7785
CVE-2026-7785MEDIUM
A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7784
CVE-2026-7784MEDIUM
RTGS2017 NagaAgent Skills Endpoint extensions.py path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7783
CVE-2026-7783MEDIUM
CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7782
CVE-2026-7782MEDIUM
CodeCanyon Perfex CRM Tenant Clients.php project authorization
33RIESGO
abrir ↗
Referência
CVE-2026-7781
CVE-2026-7781MEDIUM
Open5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of service
33RIESGO
abrir ↗
Referência
CVE-2010-3203
CVE-2010-3203—
Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read
38RIESGO
abrir ↗
Referência
CVE-2017-16928
CVE-2017-16928—
The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently g
23RIESGO
abrir ↗
Referência
CVE-2023-54357
CVE-2023-54357HIGH
Joomla com_booking 2.4.9 Information Disclosure via Account Enumeration
41RIESGO
abrir ↗
← anteriorpágina 652 / 754siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.