Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.233 exploits
Referência
CVE-2026-6148
CVE-2026-6148MEDIUM
code-projects Vehicle Showroom Management System MonthTotalReportUpdateFunction.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6140
CVE-2026-6140CRITICAL
Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6139
CVE-2026-6139CRITICAL
Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6138
CVE-2026-6138CRITICAL
Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6129
CVE-2026-6129MEDIUM
zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication
33RIESGO
abrir ↗
Referência
CVE-2019-25712
CVE-2019-25712MEDIUM
BlueAuditor 1.7.2.0 Buffer Overflow Denial of Service via Registration Key
33RIESGO
abrir ↗
Referência
CVE-2019-25711
CVE-2019-25711MEDIUM
SpotFTP Password Recover 2.4.2 Denial of Service via Name Field
33RIESGO
abrir ↗
Referência
CVE-2019-25710
CVE-2019-25710HIGH
Dolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25709
CVE-2019-25709CRITICAL
CF Image Hosting Script 1.6.5 Unauthorized Database Access
48RIESGO
abrir ↗
Referência
CVE-2019-25708
CVE-2019-25708MEDIUM
Heatmiser Wifi Thermostat 1.7 Cross-Site Request Forgery
33RIESGO
abrir ↗
Referência
CVE-2019-25705
CVE-2019-25705HIGH
Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field
41RIESGO
abrir ↗
Referência
CVE-2019-25703
CVE-2019-25703HIGH
ImpressCMS 1.3.11 SQL Injection via bid Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25701
CVE-2019-25701HIGH
Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH
41RIESGO
abrir ↗
Referência
CVE-2019-25697
CVE-2019-25697HIGH
CMSsite 1.0 SQL Injection via category.php
41RIESGO
abrir ↗
Referência
CVE-2019-25695
CVE-2019-25695HIGH
R 3.4.4 Local Buffer Overflow Windows XP SP3
41RIESGO
abrir ↗
Referência
CVE-2019-25693
CVE-2019-25693HIGH
ResourceSpace 8.6 SQL Injection via collection_edit.php
41RIESGO
abrir ↗
Referência
CVE-2019-25691
CVE-2019-25691HIGH
Faleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass
41RIESGO
abrir ↗
Referência
CVE-2019-25689
CVE-2019-25689HIGH
HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH
41RIESGO
abrir ↗
Referência
CVE-2018-25258
CVE-2018-25258HIGH
RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass
41RIESGO
abrir ↗
Referência
CVE-2018-25257
CVE-2018-25257HIGH
Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile
41RIESGO
abrir ↗
Referência
CVE-2017-20239
CVE-2017-20239MEDIUM
MDwiki Cross-Site Scripting via Location Hash Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-6126
CVE-2026-6126MEDIUM
zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication
33RIESGO
abrir ↗
Referência
CVE-2010-4282
CVE-2010-4282—
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute a
43RIESGO
abrir ↗
Referência✓ VexDay Proof
Ktools Photostore 3.5.2 - Multiple SQL Injections
CVE-2008-6648—webappsphp
SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
miniBloggie 1.0 - 'del.php' Arbitrary Delete Post
CVE-2008-6650—webappsphp
del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request with a modified post_i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OxYProject 0.85 - 'edithistory.php' Remote Code Execution
CVE-2008-6651—webappsphp
Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbit
23RIESGO
abrir ↗
Referência
CVE-2016-20079
CVE-2016-20079MEDIUM
WordPress Dharma Booking 2.28.3 Local File Inclusion via proccess.php
33RIESGO
abrir ↗
Referência
CVE-2010-4347
CVE-2010-4347—
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which a
23RIESGO
abrir ↗
Referência
CVE-2010-4356
CVE-2010-4356—
SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2010-4356
CVE-2010-4356—
SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitra
23RIESGO
abrir ↗
← anteriorpágina 428 / 742siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.