Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.343exploits catalogados
36.057CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.721GitHub PoC 14.496VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.721 exploits
Referência
CVE-2026-18895
CVE-2026-18895HIGH
UTT HiPER 1250GW APSecurity_5g strcpy stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2015-7889
CVE-2015-7889—
The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions f
23RIESGO
abrir ↗
Referência
CVE-2015-7889
CVE-2015-7889—
The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions f
23RIESGO
abrir ↗
Referência
CVE-2015-7890
CVE-2015-7890—
Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung
23RIESGO
abrir ↗
Referência
CVE-2015-7891
CVE-2015-7891—
Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with A
23RIESGO
abrir ↗
Referência
CVE-2015-7892
CVE-2015-7892—
Stack-based buffer overflow in the m2m1shot_compat_ioctl32 function in the Samsung m2m1shot driver framework, as used in
23RIESGO
abrir ↗
Referência
CVE-2015-7892
CVE-2015-7892—
Stack-based buffer overflow in the m2m1shot_compat_ioctl32 function in the Samsung m2m1shot driver framework, as used in
23RIESGO
abrir ↗
Referência
CVE-2015-7894
CVE-2015-7894—
The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allow
23RIESGO
abrir ↗
Referência
CVE-2015-7898
CVE-2015-7898—
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
23RIESGO
abrir ↗
Referência
CVE-2015-7898
CVE-2015-7898—
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
23RIESGO
abrir ↗
Referência
CVE-2015-8103
CVE-2015-8103—
The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co
60RIESGO
abrir ↗
Referência
CVE-2015-8256
CVE-2015-8256—
Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.
28RIESGO
abrir ↗
Referência
CVE-2014-6271
CVE-2014-6271CRITICALbajo ataque
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗
Referência
CVE-2014-6271
CVE-2014-6271CRITICALbajo ataque
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗
Referência
CVE-2014-6271
CVE-2014-6271CRITICALbajo ataque
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗
Referência
CVE-2026-18853
CVE-2026-18853MEDIUM
ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-18852
CVE-2026-18852MEDIUM
epsilla-cloud vectordb Filter expr.cpp ShuntingYard unusual condition
33RIESGO
abrir ↗
Referência
CVE-2026-70619
CVE-2026-70619HIGH
Odysseus Missing Admin Authorization via Embedding Endpoint Routes
41RIESGO
abrir ↗
Referência
CVE-2015-8644
CVE-2015-8644—
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on
28RIESGO
abrir ↗
Referência
CVE-2026-63769
CVE-2026-63769MEDIUM
Huginn 2022.08.18 SSRF via ScenarioImport fetch_url Method
33RIESGO
abrir ↗
Referência
CVE-2026-16276
CVE-2026-16276LOW
Classified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search
28RIESGO
abrir ↗
Referência
CVE-2026-16274
CVE-2026-16274LOW
Classified Listing < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts
28RIESGO
abrir ↗
Referência
CVE-2026-16057
CVE-2026-16057MEDIUM
Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library
33RIESGO
abrir ↗
Referência
CVE-2016-0492
CVE-2016-0492—
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12
60RIESGO
abrir ↗
Referência
CVE-2016-0492
CVE-2016-0492—
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12
60RIESGO
abrir ↗
Referência
CVE-2015-8660
CVE-2015-8660—
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op
43RIESGO
abrir ↗
Referência
CVE-2026-8155
CVE-2026-8155MEDIUM
BuddyPress < 14.5.0 - Subscriber+ Private Messages Disclosure via IDOR
33RIESGO
abrir ↗
Referência
CVE-2016-0006
CVE-2016-0006—
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Claroline 1.8.0 rc1 - 'import.lib.php' Remote File Inclusion
CVE-2006-5256—webappsphp
PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote
23RIESGO
abrir ↗
Referência
CVE-2016-0040
CVE-2016-0040HIGHbajo ataque
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to g
91RIESGO
abrir ↗
← anteriorpágina 717 / 758siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.