Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.324exploits catalogados

36.054CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientes populares riesgo

22.721 exploits

Referência

CVE-2014-5275

CVE-2014-5275—

Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote au

23RIESGO

abrir ↗

Referência

CVE-2014-5276

CVE-2014-5276—

Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated u

23RIESGO

abrir ↗

Referência

CVE-2014-5284

CVE-2014-5284—

host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, whi

23RIESGO

abrir ↗

Referência

CVE-2014-5287

CVE-2014-5287—

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input i

23RIESGO

abrir ↗

Referência

CVE-2017-0148

CVE-2017-0148HIGHbajo ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

abrir ↗

Referência

CVE-2026-8289

CVE-2026-8289MEDIUM

Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-19838

CVE-2026-19838MEDIUM

Webkul Bagisto Backend Reporting Endpoint sales authorization

33RIESGO

abrir ↗

Referência

CVE-2011-0611

CVE-2011-0611HIGHbajo ataque

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; A

100RIESGO

abrir ↗

Referência

CVE-2013-3214

CVE-2013-3214—

vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

60RIESGO

abrir ↗

Referência

CVE-2014-5347

CVE-2014-5347—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress

23RIESGO

abrir ↗

Referência

CVE-2026-19825

CVE-2026-19825MEDIUM

SourceCodester Simple Client Management System Master.php save_service sql injection

33RIESGO

abrir ↗

Referência

CVE-2017-0199

CVE-2017-0199HIGHbajo ataqueransomware

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RIESGO

abrir ↗

Referência

CVE-2017-0199

CVE-2017-0199HIGHbajo ataqueransomware

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RIESGO

abrir ↗

Referência

CVE-2017-0199

CVE-2017-0199HIGHbajo ataqueransomware

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RIESGO

abrir ↗

Referência

CVE-2026-59109

CVE-2026-59109HIGH

Zalktis: SQL injection via partner-controlled fields in imported e-invoices

41RIESGO

abrir ↗

Referência

CVE-2023-54347

CVE-2023-54347HIGH

OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass

41RIESGO

abrir ↗

Referência

CVE-2013-3535

CVE-2013-3535—

Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitra

23RIESGO

abrir ↗

Referência

CVE-2011-0652

CVE-2011-0652—

lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service (cras

23RIESGO

abrir ↗

Referência

CVE-2013-3629

CVE-2013-3629—

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution

50RIESGO

abrir ↗

Referência✓ VexDay Proof

LulieBlog 1.02 - SQL Injection

CVE-2008-0446—webappsphp

SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Referência

CVE-2026-13613

CVE-2026-13613HIGH

KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint

41RIESGO

abrir ↗

Referência

CVE-2014-5465

CVE-2014-5465—

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress

28RIESGO

abrir ↗

Referência

CVE-2026-5832

CVE-2026-5832MEDIUM

atototo api-lab-mcp HTTP http-server.ts test_http_endpoint server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-5830

CVE-2026-5830HIGH

Tenda AC15 SysToolChangePwd websGetVar stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5829

CVE-2026-5829MEDIUM

code-projects Simple IT Discussion Forum content.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5828

CVE-2026-5828MEDIUM

code-projects Simple IT Discussion Forum addcomment.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5827

CVE-2026-5827MEDIUM

code-projects Simple IT Discussion Forum question-function.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5826

CVE-2026-5826MEDIUM

code-projects Simple IT Discussion Forum edit-category.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2014-5468

CVE-2014-5468—

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cf

50RIESGO

abrir ↗

Referência✓ VexDay Proof

ActualAnalyzer - 'ant' Cookie Command Execution (Metasploit)

CVE-2014-5470CRITICALremoteunix

Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for pa

68RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.