Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.137exploits catalogados
35.961CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
22.640 exploits
Referência
CVE-2009-4575
CVE-2009-4575—
Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remote
23RIESGO
abrir ↗
Referência
CVE-2010-2317
CVE-2010-2317—
Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2010-2319
CVE-2010-2319—
SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2026-75778
CVE-2026-75778MEDIUM
code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection
33RIESGO
abrir ↗
Referência
CVE-2009-3152
CVE-2009-3152—
Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Profession
23RIESGO
abrir ↗
Referência
CVE-2026-75774
CVE-2026-75774MEDIUM
karakeep-app karakeep OAuth Sign-In auth.ts improper authentication
33RIESGO
abrir ↗
Referência
CVE-2009-4384
CVE-2009-4384—
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inje
23RIESGO
abrir ↗
Referência
CVE-2009-4384
CVE-2009-4384—
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inje
23RIESGO
abrir ↗
Referência
CVE-2009-2571
CVE-2009-2571—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2009-3747
CVE-2009-3747—
Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Referência✓ VexDay Proof
moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting
CVE-2009-1367—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2009-3911
CVE-2009-3911—
Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-2438
CVE-2009-2438—
Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remo
23RIESGO
abrir ↗
Referência
CVE-2012-10030
CVE-2012-10030CRITICAL
FreeFloat FTP Server Arbitrary File Upload
63RIESGO
abrir ↗
Referência
CVE-2012-10030
CVE-2012-10030CRITICAL
FreeFloat FTP Server Arbitrary File Upload
63RIESGO
abrir ↗
Referência
CVE-2010-5018
CVE-2010-5018—
Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script all
23RIESGO
abrir ↗
Referência
CVE-2010-5018
CVE-2010-5018—
Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script all
23RIESGO
abrir ↗
Referência
CVE-2010-4610
CVE-2010-4610—
Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-4926
CVE-2009-4926—
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RIESGO
abrir ↗
Referência
CVE-2010-2351
CVE-2010-2351—
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remo
28RIESGO
abrir ↗
Referência✓ VexDay Proof
SoftBB 0.1 - 'mail' Blind SQL Injection
CVE-2006-1327—webappsphp
SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the m
23RIESGO
abrir ↗
Referência
CVE-2015-7768
CVE-2015-7768—
Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma
50RIESGO
abrir ↗
Referência
CVE-2015-7768
CVE-2015-7768—
Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma
50RIESGO
abrir ↗
Referência
CVE-2015-7768
CVE-2015-7768—
Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma
50RIESGO
abrir ↗
Referência✓ VexDay Proof
Clansys 1.1 (showid) - SQL Injection
CVE-2006-1708—webappsphp
SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Micro CMS 0.3.5 - 'microcms_path' Remote File Inclusion
CVE-2006-3144—webappsphp
PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.5
23RIESGO
abrir ↗
Referência
CVE-2010-3962
CVE-2010-3962HIGHbajo ataque
Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary cod
100RIESGO
abrir ↗
Referência
CVE-2009-4767
CVE-2009-4767—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject
23RIESGO
abrir ↗
Referência
CVE-2008-5126
CVE-2008-5126—
Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2010-20113
CVE-2010-20113CRITICAL
EasyFTP Server list.html path Stack Buffer Overflow
63RIESGO
abrir ↗
← anteriorpágina 655 / 755siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.