Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.062exploits catalogados

31.617CVEs con explotación pública

0probados en laboratorio

Todos Exploit-DB 22.467Referência 19.791GitHub PoC 13.086VulnCheck XDB 8069Nuclei 4187Metasploit 3462✓ solo verificadosrecientes populares riesgo

19.791 exploits

Referência

CVE-2014-6332

CVE-2014-6332HIGHbajo ataque

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

100RIESGO

Referência

CVE-2014-6332

CVE-2014-6332HIGHbajo ataque

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

100RIESGO

Referência

CVE-2014-6332

CVE-2014-6332HIGHbajo ataque

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

100RIESGO

Referência

CVE-2014-6332

CVE-2014-6332HIGHbajo ataque

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

100RIESGO

Referência

CVE-2019-20215

CVE-2019-20215—

D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the

60RIESGO

Referência

CVE-2023-7028

CVE-2023-7028CRITICALbajo ataque

Weak Password Recovery Mechanism for Forgotten Password in GitLab

100RIESGO

Referência

CVE-2020-2883

CVE-2020-2883CRITICALbajo ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

100RIESGO

Referência

CVE-2021-4034

CVE-2021-4034HIGHbajo ataque

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

Referência

CVE-2021-4034

CVE-2021-4034HIGHbajo ataque

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

Referência

CVE-2015-0235

CVE-2015-0235—

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

Referência

CVE-2015-0235

CVE-2015-0235—

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

Referência

CVE-2015-0235

CVE-2015-0235—

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

Referência

CVE-2015-0235

CVE-2015-0235—

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

Referência

CVE-2015-0235

CVE-2015-0235—

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

Referência

CVE-2015-0235

CVE-2015-0235—

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

Referência

CVE-2017-9822

CVE-2017-9822HIGHbajo ataqueransomware

DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code e

100RIESGO

Referência

CVE-2010-4915

CVE-2010-4915—

SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL

23RIESGO

Referência★ 9

k4nfr3/CVE-2024-9474

CVE-2024-9474MEDIUMbajo ataqueransomware

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

100RIESGO

Referência

CVE-2021-46422

CVE-2021-46422—

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RIESGO

Referência

CVE-2021-46422

CVE-2021-46422—

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RIESGO

Referência

CVE-2020-6287

CVE-2020-6287CRITICALbajo ataque

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c

100RIESGO

Referência

Grafana 11.6.0 - SSRF

CVE-2025-4123HIGH

A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redire

78RIESGO

Referência

CVE-2017-9248

CVE-2017-9248CRITICALbajo ataque

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not

100RIESGO

Referência

CVE-2024-8517

CVE-2024-8517CRITICAL

SPIP Bigup Multipart File Upload OS Command Injection

85RIESGO

Referência

CVE-2024-8517

CVE-2024-8517CRITICAL

SPIP Bigup Multipart File Upload OS Command Injection

85RIESGO

Referência

CVE-2020-24186

CVE-2020-24186CRITICAL

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allo

85RIESGO

Referência

CVE-2020-24186

CVE-2020-24186CRITICAL

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allo

85RIESGO

Referência

CVE-2020-24186

CVE-2020-24186CRITICAL

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allo

85RIESGO

Referência

CVE-2016-5674

CVE-2016-5674—

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR Rea

60RIESGO

Referência

CVE-2010-3972

CVE-2010-3972—

Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0

60RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.