Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.302exploits catalogados
35.469CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.301 exploits
Referência
CVE-2026-6626
CVE-2026-6626MEDIUM
Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection
33RIESGO
abrir ↗
Referência
CVE-2026-6625
CVE-2026-6625MEDIUM
moxi624 Mogu Blog v2 Picture Storage Service LocalFileServiceImpl.java LocalFileServiceImpl.uploadPictureByUrl server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-6624
CVE-2026-6624MEDIUM
BichitroGan ISP Billing Software Pool List add cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2017-9413
CVE-2017-9413—
Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attacke
23RIESGO
abrir ↗
Referência
CVE-2017-9430
CVE-2017-9430—
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o
28RIESGO
abrir ↗
Referência
CVE-2017-9730
CVE-2017-9730—
SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2026-29002
CVE-2026-29002HIGH
CouchCMS Privilege Escalation via f_k_levels_list Parameter
41RIESGO
abrir ↗
Referência
CVE-2026-6038
CVE-2026-6038MEDIUM
code-projects Vehicle Showroom Management System RegisterCustomerFunction.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6037
CVE-2026-6037MEDIUM
code-projects Vehicle Showroom Management System AddVehicleFunction.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6036
CVE-2026-6036MEDIUM
code-projects Vehicle Showroom Management System VehicleDetailsFunction.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6035
CVE-2026-6035MEDIUM
code-projects Vehicle Showroom Management System ServiceAndSalesReport.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6034
CVE-2026-6034MEDIUM
code-projects Vehicle Showroom Management System ProfitAndLossReport.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6033
CVE-2026-6033MEDIUM
CodeAstro Online Classroom updatedetailsfromstudent.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6032
CVE-2026-6032MEDIUM
code-projects Simple Laundry System checkcheckout.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6031
CVE-2026-6031MEDIUM
code-projects Simple IT Discussion Forum add-category-function.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6030
CVE-2026-6030MEDIUM
itsourcecode Construction Management System del1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6029
CVE-2026-6029CRITICAL
Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6028
CVE-2026-6028CRITICAL
Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6027
CVE-2026-6027CRITICAL
Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-4432
CVE-2026-4432MEDIUM
YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated Arbitrary Wishlist Renaming via IDOR
33RIESGO
abrir ↗
Referência
CVE-2025-14545
CVE-2025-14545MEDIUM
YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via Feed Generation
33RIESGO
abrir ↗
Referência
CVE-2026-6026
CVE-2026-6026CRITICAL
Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6025
CVE-2026-6025CRITICAL
Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6024
CVE-2026-6024MEDIUM
Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-6016
CVE-2026-6016HIGH
Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-6015
CVE-2026-6015HIGH
Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2010-4850
CVE-2010-4850—
Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗
Referência
CVE-2018-0710
CVE-2018-0710—
Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authe
28RIESGO
abrir ↗
Referência
CVE-2018-0710
CVE-2018-0710—
Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authe
28RIESGO
abrir ↗
Referência
CVE-2018-0748
CVE-2018-0748—
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and
23RIESGO
abrir ↗
← anteriorpágina 451 / 744siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.