Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.794exploits catalogados

36.057CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientes populares riesgo

22.721 exploits

Referência

CVE-2017-0147

CVE-2017-0147HIGHbajo ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

abrir ↗

Referência✓ VexDay Proof

ITechBids 6.0 - 'item_id' SQL Injection

CVE-2008-0776—webappsphp

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass

CVE-2008-0782—webappsphp

Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via

28RIESGO

abrir ↗

Referência

CVE-2026-8172

CVE-2026-8172HIGH

Simple Basic Contact Form <= 20250114 - Reflected XSS

41RIESGO

abrir ↗

Referência

CVE-2026-8163

CVE-2026-8163HIGH

Infility Global < 2.15.19 - Subscriber+ SQL Injection via order Parameter

41RIESGO

abrir ↗

Referência

CVE-2026-39904

CVE-2026-39904HIGH

Gophish 0.12.1 Denial of Service via Office Document Upload

41RIESGO

abrir ↗

Referência

CVE-2020-37255

CVE-2020-37255HIGH

WordPress Time Capsule Plugin 1.21.16 Authentication Bypass

41RIESGO

abrir ↗

Referência

CVE-2017-0146

CVE-2017-0146HIGHbajo ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

abrir ↗

Referência

CVE-2017-0288

CVE-2017-0288—

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT

23RIESGO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 1.62 - Multiple SQL Injections

CVE-2008-0811—webappsphp

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1)

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XPWeb 3.3.2 - 'url' Remote File Disclosure

CVE-2008-0813—webappsphp

Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote atta

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TRUC 0.11.0 - 'download.php' Remote File Disclosure

CVE-2008-0814—webappsphp

Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 allows remote attac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Apple iOS 4.0.3 - DPAP Server Denial of Service

CVE-2008-0830—dosios

The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Rapid Recipe 1.6.5 - SQL Injection

CVE-2008-0831—webappsphp

Multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 and earlier component for Joomla! all

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Ricette 1.0 - SQL Injection

CVE-2008-0841—webappsphp

SQL injection vulnerability in index.php in the Giorgio Nordo Ricette (com_ricette) 1.0 component for Joomla! and Mambo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_clasifier - 'cat_id' SQL Injection

CVE-2008-0842—webappsphp

SQL injection vulnerability in index.php in the Classifier (com_clasifier) component for Joomla! allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_pccookbook - 'user_id' SQL Injection

CVE-2008-0844—webappsphp

SQL injection vulnerability in index.php in the PccookBook (com_pccookbook) component for Joomla! allows remote attacker

23RIESGO

abrir ↗

Referência

CVE-2026-10243

CVE-2026-10243MEDIUM

code-projects Smart Parking System Admin Endpoint missing authentication

33RIESGO

abrir ↗

Referência

CVE-2016-7287

CVE-2016-7287—

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary c

35RIESGO

abrir ↗

Referência

CVE-2026-10123

CVE-2026-10123HIGH

TRENDnet TEW-432BRP formSetDomainFilter stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-10121

CVE-2026-10121HIGH

TRENDnet TEW-432BRP formSetUrlFilter stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2018-25422

CVE-2018-25422HIGH

MOGG web simulator Script All Version SQL Injection via play.php

41RIESGO

abrir ↗

Referência

CVE-2016-8655

CVE-2016-8655—

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RIESGO

abrir ↗

Referência

CVE-2017-11909

CVE-2017-11909—

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

35RIESGO

abrir ↗

Referência

CVE-2016-8809

CVE-2016-8809—

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

23RIESGO

abrir ↗

Referência

CVE-2016-8810

CVE-2016-8810—

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

23RIESGO

abrir ↗

Referência

CVE-2017-12500

CVE-2017-12500—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found

28RIESGO

abrir ↗

Referência

CVE-2017-0072

CVE-2017-0072—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

35RIESGO

abrir ↗

Referência

CVE-2017-0087

CVE-2017-0087—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

35RIESGO

abrir ↗

Referência

CVE-2022-1163

CVE-2022-1163MEDIUM

Cross-site Scripting (XSS) - Stored in mineweb/minewebcms

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.