Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.325exploits catalogados
36.055CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.721GitHub PoC 14.478VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.721 exploits
Referência
CVE-2012-6039
CVE-2012-6039—
SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
blur6ex 0.3.462 - 'ID' Admin Disclosure / Blind SQL Injection
CVE-2006-3065—webappsphp
SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2026-77694
CVE-2026-77694MEDIUM
Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token
33RIESGO
abrir ↗
Referência✓ VexDay Proof
fipsGallery 1.5 - 'index1.asp' SQL Injection
CVE-2006-6117—webappsasp
SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2026-12811
CVE-2026-12811MEDIUM
kortix-ai suna Auth Endpoint page.tsx router.push cross site scripting
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Sisfo Kampus 0.8 - Remote File Inclusion / Download
CVE-2006-6137—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Sisfo Kampus 0.8 allow remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sisfo Kampus 0.8 - Remote File Inclusion / Download
CVE-2006-6138—webappsphp
Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary director
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Spaminator 1.7 - 'page' Remote File Inclusion
CVE-2006-4158—webappsphp
PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component Peoplebook 1.0 - Remote File Inclusion
CVE-2006-4195—webappsphp
PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Wheatblog 1.1 - 'session.php' Remote File Inclusion
CVE-2006-4198—webappsphp
PHP remote file inclusion vulnerability in includes/session.php in Wheatblog (wB) 1.1 and earlier, when register_globals
23RIESGO
abrir ↗
Referência
CVE-2015-2208
CVE-2015-2208—
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via she
50RIESGO
abrir ↗
Referência✓ VexDay Proof
Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (1)
CVE-2006-4202—webappsasp
SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WEBInsta MM 1.3e - 'cabsolute_path' Remote File Inclusion
CVE-2006-4209—webappsphp
PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Thatware 0.4.6 - 'ROOT_PATH' Remote File Inclusion
CVE-2006-4213—webappsphp
PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows re
23RIESGO
abrir ↗
Referência
CVE-2015-2216
CVE-2015-2216—
SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VistaBB 2.x - 'functions_mod_user.php' Remote File Inclusion
CVE-2006-4365—webappsphp
Multiple PHP remote file inclusion vulnerabilities in VistaBB 2.0.33 and earlier allow remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Integramod Portal 2.x - 'functions_portal.php' Remote File Inclusion
CVE-2006-4368—webappsphp
PHP remote file inclusion vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Integramod Portal 2.x - 'functions_portal.php' Remote File Inclusion
CVE-2006-4369—webappsphp
Absolute path traversal vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier, when magic_
23RIESGO
abrir ↗
Referência
CVE-2026-10694
CVE-2026-10694MEDIUM
SourceCodester Online Food Ordering System index.php include file inclusion
33RIESGO
abrir ↗
Referência
CVE-2013-1763
CVE-2013-1763—
Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l
23RIESGO
abrir ↗
Referência
CVE-2026-10226
CVE-2026-10226MEDIUM
raisulislamg4 student_management_system_by_php delete.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-10225
CVE-2026-10225MEDIUM
raisulislamg4 student_management_system_by_php Login login_check.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-10222
CVE-2026-10222MEDIUM
NousResearch hermes-agent config.py _sanitize_env_lines injection
33RIESGO
abrir ↗
Referência
CVE-2026-10221
CVE-2026-10221MEDIUM
NousResearch hermes-agent run_agent.py _compress_context injection
33RIESGO
abrir ↗
Referência
CVE-2026-16984
CVE-2026-16984MEDIUM
WP Legal Pages < 3.7.1 - Unauthenticated API Secret Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-14550
CVE-2026-14550MEDIUM
WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization
33RIESGO
abrir ↗
Referência
CVE-2026-10163
CVE-2026-10163HIGH
Edimax BR-6478AC POST Request formUSBAccount buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2018-25425
CVE-2018-25425HIGH
Yot CMS 3.3.1 SQL Injection via aid and cid Parameters
41RIESGO
abrir ↗
Referência
CVE-2026-6816
CVE-2026-6816MEDIUM
TFA Basic Plugins - Access Bypass
33RIESGO
abrir ↗
Referência
CVE-2026-42425
CVE-2026-42425HIGH
OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery
41RIESGO
abrir ↗
← anteriorpágina 714 / 758siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.