Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.449exploits catalogados

35.552CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.332 exploits

Referência

CVE-2026-13590

CVE-2026-13590MEDIUM

seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-13589

CVE-2026-13589MEDIUM

seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-34112

CVE-2026-34112CRITICAL

Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php

48RIESGO

abrir ↗

Referência

CVE-2026-13588

CVE-2026-13588MEDIUM

seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-13587

CVE-2026-13587MEDIUM

seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-13583

CVE-2026-13583HIGH

Edimax EW-7478APC POST Request formUSBFolder buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2018-9106

CVE-2018-9106—

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extensio

23RIESGO

abrir ↗

Referência

CVE-2026-10877

CVE-2026-10877MEDIUM

SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10876

CVE-2026-10876MEDIUM

SourceCodester Ship Ferry Ticket Reservation System admin improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-10870

CVE-2026-10870HIGH

Shibby Tomato Web UI rc start_dhcpc os command injection

41RIESGO

abrir ↗

Referência

CVE-2025-71316

CVE-2025-71316CRITICAL

SQLite sqldiff remote code execution via argument injection

48RIESGO

abrir ↗

Referência

CVE-2026-25551

CVE-2026-25551HIGH

Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting Service

41RIESGO

abrir ↗

Referência

CVE-2026-10813

CVE-2026-10813LOW

LMCache KV Cache utils.py hex_hash_to_int16 weak hash

28RIESGO

abrir ↗

Referência

CVE-2018-9237

CVE-2018-9237—

iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.

23RIESGO

abrir ↗

Referência

CVE-2026-10181

CVE-2026-10181HIGH

TRENDnet TEW-432BRP formSysCmd stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-10175

CVE-2026-10175MEDIUM

Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

33RIESGO

abrir ↗

Referência

CVE-2026-10174

CVE-2026-10174MEDIUM

Aider-AI Aider Pre-commit Hook args.py protection mechanism

33RIESGO

abrir ↗

Referência

CVE-2026-10173

CVE-2026-10173MEDIUM

Orthanc Explorer 2 URL StudyList.vue cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-10172

CVE-2026-10172MEDIUM

Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2019-0541

CVE-2019-0541HIGHbajo ataque

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML E

83RIESGO

abrir ↗

Referência

CVE-2026-9562

CVE-2026-9562MEDIUM

sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control

33RIESGO

abrir ↗

Referência

CVE-2026-11312

CVE-2026-11312MEDIUM

bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity

33RIESGO

abrir ↗

Referência

CVE-2026-10878

CVE-2026-10878MEDIUM

D-Link DWR-M920 formSmsManage sub_41C8E8 command injection

33RIESGO

abrir ↗

Referência

CVE-2026-9544

CVE-2026-9544MEDIUM

Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-9543

CVE-2026-9543CRITICAL

Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-10783

CVE-2026-10783LOW

gradio-app gradio Audio Cache Key save_audio_to_cache weak hash

28RIESGO

abrir ↗

Referência

CVE-2026-10722

CVE-2026-10722MEDIUM

cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow

33RIESGO

abrir ↗

Referência

CVE-2026-10704

CVE-2026-10704MEDIUM

SourceCodester Pizzafy E-Commerce System Administrative Control Panel admin_class_novo.php login sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10703

CVE-2026-10703MEDIUM

EIPStackGroup OpENer SendRRData cipmessagerouter.c CreateMessageRouterRequestStructure use after free

33RIESGO

abrir ↗

Referência

CVE-2026-10692

CVE-2026-10692MEDIUM

johnhuang316 code-index-mcp search_code_advanced is_safe_regex_pattern redos

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.