Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.329exploits catalogados
36.057CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.721GitHub PoC 14.482VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.721 exploits
Referência
CVE-2017-15967
CVE-2017-15967—
Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the e
23RIESGO
abrir ↗
Referência
CVE-2015-6305
CVE-2015-6305—
Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConne
23RIESGO
abrir ↗
Referência
CVE-2017-15968
CVE-2017-15968—
MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-15969
CVE-2017-15969—
PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_cata
23RIESGO
abrir ↗
Referência
CVE-2017-15969
CVE-2017-15969—
PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_cata
23RIESGO
abrir ↗
Referência
CVE-2021-34369
CVE-2021-34369—
portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensiti
23RIESGO
abrir ↗
Referência
CVE-2026-75089
CVE-2026-75089MEDIUM
PHPGurukul Complaint Management System check_availability.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-75014
CVE-2026-75014MEDIUM
SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-75013
CVE-2026-75013HIGH
TOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereference
41RIESGO
abrir ↗
Referência
CVE-2026-19995
CVE-2026-19995MEDIUM
Webkul Bagisto RMA Message send-message cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2015-7297
CVE-2015-7297—
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un
60RIESGO
abrir ↗
Referência
CVE-2015-7601
CVE-2015-7601—
Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..//
50RIESGO
abrir ↗
Referência
CVE-2017-15973
CVE-2017-15973—
Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php.
23RIESGO
abrir ↗
Referência
CVE-2015-7603
CVE-2015-7603—
Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote attackers to read arbitrary files via
50RIESGO
abrir ↗
Referência
CVE-2015-7714
CVE-2015-7714—
Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote adm
23RIESGO
abrir ↗
Referência
CVE-2015-7858
CVE-2015-7858—
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un
60RIESGO
abrir ↗
Referência
CVE-2015-7890
CVE-2015-7890—
Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung
23RIESGO
abrir ↗
Referência
CVE-2015-8410
CVE-2015-8410—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RIESGO
abrir ↗
Referência
CVE-2015-8428
CVE-2015-8428—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RIESGO
abrir ↗
Referência
CVE-2016-0040
CVE-2016-0040HIGHbajo ataque
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to g
91RIESGO
abrir ↗
Referência
CVE-2016-0491
CVE-2016-0491—
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12
60RIESGO
abrir ↗
Referência
CVE-2026-19770
CVE-2026-19770MEDIUM
feedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-19049
CVE-2026-19049HIGH
ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie
41RIESGO
abrir ↗
Referência
CVE-2016-10033
CVE-2016-10033CRITICALbajo ataque
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RIESGO
abrir ↗
Referência
CVE-2026-16595
CVE-2026-16595MEDIUM
WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-16590
CVE-2026-16590MEDIUM
WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-19244
CVE-2026-19244MEDIUM
HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control
33RIESGO
abrir ↗
Referência
CVE-2016-1106
CVE-2016-1106—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RIESGO
abrir ↗
Referência
CVE-2026-15215
CVE-2026-15215HIGH
Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation
41RIESGO
abrir ↗
Referência
CVE-2026-15214
CVE-2026-15214MEDIUM
Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR
33RIESGO
abrir ↗
← anteriorpágina 715 / 758siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.