Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.449exploits catalogados

35.552CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.332 exploits

Referência

CVE-2026-5654

CVE-2026-5654MEDIUM

Stack-based Buffer Overflow in Wireshark

33RIESGO

abrir ↗

Referência

CVE-2026-5653

CVE-2026-5653MEDIUM

Heap-based Buffer Overflow in Wireshark

33RIESGO

abrir ↗

Referência

CVE-2026-6538

CVE-2026-6538MEDIUM

Stack-based Buffer Overflow in Wireshark

33RIESGO

abrir ↗

Referência

CVE-2026-6534

CVE-2026-6534MEDIUM

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

33RIESGO

abrir ↗

Referência

CVE-2026-6533

CVE-2026-6533MEDIUM

Improperly Controlled Sequential Memory Allocation in Wireshark

33RIESGO

abrir ↗

Referência

CVE-2026-6532

CVE-2026-6532MEDIUM

Buffer Over-read in Wireshark

33RIESGO

abrir ↗

Referência

CVE-2026-6531

CVE-2026-6531MEDIUM

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

33RIESGO

abrir ↗

Referência

CVE-2026-7470

CVE-2026-7470HIGH

Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-7469

CVE-2026-7469MEDIUM

Tenda 4G300 DelFil sub_425A28 command injection

33RIESGO

abrir ↗

Referência

CVE-2026-7447

CVE-2026-7447MEDIUM

SourceCodester Pet Grooming Management Software update_customer.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7446

CVE-2026-7446MEDIUM

VetCoders mcp-server-semgrep MCP index.ts create_rule os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-7445

CVE-2026-7445MEDIUM

ZachHandley ZMCPTools MCP Log Resource ResourceManager.ts path traversal

33RIESGO

abrir ↗

Referência

CVE-2016-20066

CVE-2016-20066MEDIUM

WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting

33RIESGO

abrir ↗

Referência

CVE-2026-9278

CVE-2026-9278MEDIUM

Form Builder CP < 1.2.47 - Editor+ Stored XSS via form_structure

33RIESGO

abrir ↗

Referência

CVE-2026-24066

CVE-2026-24066HIGH

Slate Digital Connect macOS XPC certificate validation privilege escalation

41RIESGO

abrir ↗

Referência

CVE-2026-9067

CVE-2026-9067CRITICAL

Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload

48RIESGO

abrir ↗

Referência

CVE-2026-9060

CVE-2026-9060LOW

Agile Store Locator < 1.6.6 - Admin+ Stored XSS via map_style

28RIESGO

abrir ↗

Referência

CVE-2026-3326

CVE-2026-3326HIGH

XStore < 9.7.3 - Unauthenticated SQLi

56RIESGO

abrir ↗

Referência

CVE-2017-20249

CVE-2017-20249HIGH

WordPress Plugin Apptha Slider Gallery 1.0 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2017-20248

CVE-2017-20248HIGH

WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download

41RIESGO

abrir ↗

Referência

CVE-2026-11558

CVE-2026-11558MEDIUM

CodeAstro Payroll System home_salary.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11557

CVE-2026-11557HIGH

Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-39908

CVE-2026-39908HIGH

OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source

41RIESGO

abrir ↗

Referência

CVE-2026-11533

CVE-2026-11533MEDIUM

imvks786 student_management_system Student Deletion Endpoint see.php improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-11532

CVE-2026-11532MEDIUM

imvks786 student_management_system Student Record add.php access control

33RIESGO

abrir ↗

Referência

CVE-2026-11506

CVE-2026-11506MEDIUM

CodeAstro Leave Management System search_staff_for_deletion.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11504

CVE-2026-11504HIGH

Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-11503

CVE-2026-11503HIGH

Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-11502

CVE-2026-11502LOW

JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirect

28RIESGO

abrir ↗

Referência

CVE-2019-12372

CVE-2019-12372—

Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.