Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.324exploits catalogados
36.054CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.697 exploits
Referência
CVE-2014-5287
CVE-2014-5287—
A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i
23RIESGO
abrir ↗
Referência
CVE-2026-19898
CVE-2026-19898MEDIUM
VictoriaMetrics VMAuth Authentication Endpoint main.go requestHandler excessive authentication
33RIESGO
abrir ↗
Referência
CVE-2014-5345
CVE-2014-5345—
Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress al
23RIESGO
abrir ↗
Referência
CVE-2017-0148
CVE-2017-0148HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2026-8289
CVE-2026-8289MEDIUM
Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-19838
CVE-2026-19838MEDIUM
Webkul Bagisto Backend Reporting Endpoint sales authorization
33RIESGO
abrir ↗
Referência
CVE-2011-0611
CVE-2011-0611HIGHbajo ataque
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; A
100RIESGO
abrir ↗
Referência
CVE-2013-3214
CVE-2013-3214—
vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.
60RIESGO
abrir ↗
Referência
CVE-2014-5347
CVE-2014-5347—
Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress
23RIESGO
abrir ↗
Referência
CVE-2026-19825
CVE-2026-19825MEDIUM
SourceCodester Simple Client Management System Master.php save_service sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-19787
CVE-2026-19787MEDIUM
SourceCodester Air Cargo Management System Master.php save_cargo_type sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
FaScript FaPersianHack 1.0 - SQL Injection
CVE-2008-0326—webappsphp
SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2014-5395
CVE-2014-5395—
Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13S
23RIESGO
abrir ↗
Referência
CVE-2026-5633
CVE-2026-5633MEDIUM
assafelovic gpt-researcher ws Endpoint server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2014-5520
CVE-2014-5520—
SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2014-6030
CVE-2014-6030—
Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2014-6043
CVE-2014-6043—
ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database
28RIESGO
abrir ↗
Referência
CVE-2018-25235
CVE-2018-25235MEDIUM
NetworkActiv Web Server 4.0 Username Field Buffer Overflow DoS
33RIESGO
abrir ↗
Referência
CVE-2018-25234
CVE-2018-25234MEDIUM
SmartFTP Client 9.0.2615.0 Denial of Service via Host Field
33RIESGO
abrir ↗
Referência
CVE-2018-25233
CVE-2018-25233MEDIUM
WebDrive 18.00.5057 Denial of Service via Secure WebDAV
33RIESGO
abrir ↗
Referência
CVE-2018-25232
CVE-2018-25232MEDIUM
Softros LAN Messenger 9.2 Denial of Service via Log Files Location
33RIESGO
abrir ↗
Referência
CVE-2018-25231
CVE-2018-25231MEDIUM
HeidiSQL 9.5.0.5196 Denial of Service via Preferences
33RIESGO
abrir ↗
Referência
CVE-2018-25230
CVE-2018-25230MEDIUM
Free IP Switcher 3.1 Denial of Service via Computer Name
33RIESGO
abrir ↗
Referência
CVE-2018-25229
CVE-2018-25229MEDIUM
BulletProof FTP Server 2019.0.0.50 Denial of Service via SMTP
33RIESGO
abrir ↗
Referência
CVE-2018-25228
CVE-2018-25228MEDIUM
NetSetMan 4.7.1 Workgroup Buffer Overflow Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2018-25227
CVE-2018-25227MEDIUM
Valentina Studio 9.0.4 Denial of Service via Host Parameter
33RIESGO
abrir ↗
Referência
CVE-2018-25226
CVE-2018-25226MEDIUM
FTPShell Server 6.83 Denial of Service via Account Name
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Exponent CMS 0.96.3 - 'view' Remote Command Execution
CVE-2006-4963—webappsphp
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke Module books SQL - 'cid' SQL Injection
CVE-2008-0827—webappsphp
SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência
CVE-2013-4950
CVE-2013-4950—
Cross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
← anteriorpágina 699 / 757siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.