Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.266 exploits
Referência
CVE-2018-17391
CVE-2018-17391—
SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.
23RIESGO
abrir ↗
Referência
CVE-2018-17391
CVE-2018-17391—
SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-66749
CVE-2026-66749HIGH
Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Sun Board 1.00.00 alpha - Remote File Inclusion
CVE-2007-3370—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrar
45RIESGO
abrir ↗
Referência
CVE-2026-66029
CVE-2026-66029MEDIUM
Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field
33RIESGO
abrir ↗
Referência
CVE-2026-5659
CVE-2026-5659MEDIUM
pytries datrie trie File datrie.pyx Trie.__setstate__ deserialization
33RIESGO
abrir ↗
Referência
CVE-2026-5650
CVE-2026-5650MEDIUM
code-projects Online Application System for Admission oas.sql sensitive information
33RIESGO
abrir ↗
Referência
CVE-2026-5649
CVE-2026-5649MEDIUM
code-projects Online Application System for Admission Endpoint admsnform.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5648
CVE-2026-5648MEDIUM
code-projects Simple Laundry System Parameter userfinishregister.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5647
CVE-2026-5647MEDIUM
code-projects Online Shoe Store Add Product admin_feature.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5646
CVE-2026-5646MEDIUM
code-projects Easy Blog Site login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5645
CVE-2026-5645MEDIUM
projectworlds Car Rental System Parameter pay.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5644
CVE-2026-5644MEDIUM
Cyber-III Student-Management-System batch-notice.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5643
CVE-2026-5643MEDIUM
Cyber-III Student-Management-System Admin Add Endpoint notice.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5642
CVE-2026-5642MEDIUM
Cyber-III Student-Management-System HTTP POST Request update.php improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-5641
CVE-2026-5641MEDIUM
PHPGurukul Online Shopping Portal Project Parameter update-image1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5640
CVE-2026-5640MEDIUM
PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5639
CVE-2026-5639MEDIUM
PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5638
CVE-2026-5638MEDIUM
HerikLyma CPPWebFramework path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-14733
CVE-2026-14733MEDIUM
SourceCodester Class and Exam Timetabling System edit_coursea.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-18322
CVE-2018-18322—
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/ind
28RIESGO
abrir ↗
Referência
CVE-2018-18325
CVE-2018-18325HIGHbajo ataque
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue ex
100RIESGO
abrir ↗
Referência
CVE-2018-18326
CVE-2018-18326—
DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expect
50RIESGO
abrir ↗
Referência
CVE-2018-18416
CVE-2018-18416—
LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name par
23RIESGO
abrir ↗
Referência
CVE-2018-18416
CVE-2018-18416—
LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name par
23RIESGO
abrir ↗
Referência
CVE-2018-18417
CVE-2018-18417—
In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as d
23RIESGO
abrir ↗
Referência
CVE-2026-10152
CVE-2026-10152MEDIUM
TaleLin lin-cms-spring-boot book Endpoint BookController.java access control
33RIESGO
abrir ↗
Referência
CVE-2026-10127
CVE-2026-10127MEDIUM
Edimax BR-6478AC POST Request formStaDrvSetup command injection
33RIESGO
abrir ↗
Referência
CVE-2026-6000
CVE-2026-6000MEDIUM
code-projects Online Library Management System SQL Database Backup File library.sql information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-5998
CVE-2026-5998MEDIUM
zhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversal
33RIESGO
abrir ↗
← anteriorpágina 438 / 743siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.