Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.266 exploits
Referência
CVE-2010-4944
CVE-2010-4944—
SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attac
23RIESGO
abrir ↗
Referência
CVE-2010-4954
CVE-2010-4954—
SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2026-5472
CVE-2026-5472MEDIUM
ProjectsAndPrograms School Management System Profile Picture settings.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-5471
CVE-2026-5471MEDIUM
Investory Toy Planet Trouble App app.investory.toyfactory google-services-desktop.json hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5470
CVE-2026-5470MEDIUM
mixelpixx Google-Research-MCP Model Context Protocol content-extractor.service.ts extractContent server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-5462
CVE-2026-5462MEDIUM
Wahoo Fitness SYSTM App com.WahooFitness.SYSTM BuildConfig.java hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5458
CVE-2026-5458MEDIUM
Noelse Individuals & Pro App com.afone.noelse BuildConfig.java hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5457
CVE-2026-5457MEDIUM
PropertyGuru AgentNet Singapore App com.allproperty.android.agentnet BuildConfig.java hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5456
CVE-2026-5456MEDIUM
Align Technology My Invisalign App com.aligntech.myinvisalign.emea BuildConfig.java hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5455
CVE-2026-5455MEDIUM
Dialogue App ca.diagram.dialogue config.json hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5454
CVE-2026-5454MEDIUM
GRID Organiser App co.gridapp.organiser app.json hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5418
CVE-2026-5418MEDIUM
appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-5559
CVE-2026-5559MEDIUM
AntaresMugisho PyBlade AST Validation sandbox.py _is_safe_ast special elements used in a template engine
33RIESGO
abrir ↗
Referência
CVE-2026-5558
CVE-2026-5558MEDIUM
PHPGurukul PHPGurukul Online Shopping Portal Project Parameter pending-orders.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-25251
CVE-2018-25251HIGH
Snes9K 0.0.9z Buffer Overflow SEH via Netplay Socket
41RIESGO
abrir ↗
Referência
CVE-2018-25250
CVE-2018-25250MEDIUM
MyBB Last User's Threads in Profile Plugin 1.2 Persistent XSS
33RIESGO
abrir ↗
Referência
CVE-2018-25249
CVE-2018-25249MEDIUM
MyBB My Arcade Plugin 1.3 Persistent XSS via Comment
33RIESGO
abrir ↗
Referência
CVE-2018-25248
CVE-2018-25248MEDIUM
MyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.php
33RIESGO
abrir ↗
Referência
CVE-2018-25247
CVE-2018-25247MEDIUM
MyBB Like Plugin 3.0.0 Cross-Site Scripting via User Profiles
33RIESGO
abrir ↗
Referência
CVE-2018-25245
CVE-2018-25245HIGH
7 Tik 1.0.1.0 Denial of Service via Search
41RIESGO
abrir ↗
Referência
CVE-2018-25244
CVE-2018-25244MEDIUM
Eco Search 1.0.2.0 Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2018-25243
CVE-2018-25243MEDIUM
FastTube 1.0.1.0 Denial of Service via Search
33RIESGO
abrir ↗
Referência
CVE-2018-25242
CVE-2018-25242MEDIUM
One Search 1.1.0.0 Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2018-25241
CVE-2018-25241HIGH
VPN Browser+ 1.1.0.0 Denial of Service
41RIESGO
abrir ↗
Referência
CVE-2018-10068
CVE-2018-10068—
The jDownloads extension before 3.2.59 for Joomla! has XSS.
23RIESGO
abrir ↗
Referência
CVE-2018-10077
CVE-2018-10077—
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to re
23RIESGO
abrir ↗
Referência
CVE-2018-10078
CVE-2018-10078—
Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to i
23RIESGO
abrir ↗
Referência
CVE-2018-10253
CVE-2018-10253—
Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.
23RIESGO
abrir ↗
Referência
CVE-2018-10256
CVE-2018-10256—
A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privile
23RIESGO
abrir ↗
Referência
CVE-2018-10259
CVE-2018-10259—
An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged u
23RIESGO
abrir ↗
← anteriorpágina 442 / 743siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.