Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.620exploits catalogados

35.647CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8693Nuclei 4299Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.367 exploits

Referência

CVE-2019-6282

CVE-2019-6282—

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpag

23RIESGO

abrir ↗

Referência

CVE-2026-34102

CVE-2026-34102CRITICAL

Guardian Language-System Unauthenticated SQL Injection via id Parameter in job_info_get.php

48RIESGO

abrir ↗

Referência

CVE-2026-58454

CVE-2026-58454HIGH

JAIOTlink C492A-W6 4.8.30.57701411 RCE via /Anyka/config Endpoint

41RIESGO

abrir ↗

Referência

CVE-2026-13560

CVE-2026-13560MEDIUM

Edimax EW-7478APC POST Request formAccept os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-13558

CVE-2026-13558MEDIUM

CodeAstro Complaint Management System Report addreport cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-13557

CVE-2026-13557MEDIUM

itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-13556

CVE-2026-13556MEDIUM

itsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-13555

CVE-2026-13555MEDIUM

itsourcecode Online Hotel Management System controller.php add sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-54092

CVE-2026-54092MEDIUM

File Browser: DoS Vulnerability on Public Login API

33RIESGO

abrir ↗

Referência

CVE-2026-53264

CVE-2026-53264HIGH

net/sched: act_api: use RCU with deferred freeing for action lifecycle

41RIESGO

abrir ↗

Referência

Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 - Unauthenticated Admin Password Reset

CVE-2019-6441—webappshardware

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM33

35RIESGO

abrir ↗

Referência

CVE-2026-9529

CVE-2026-9529MEDIUM

GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference

33RIESGO

abrir ↗

Referência

CVE-2026-9526

CVE-2026-9526MEDIUM

itsourcecode Electronic Judging System edit_team.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-9525

CVE-2026-9525MEDIUM

itsourcecode Electronic Judging System edit_judge.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-9521

CVE-2026-9521MEDIUM

fraillt bitsery std_smart_ptr.h loadFromSharedState improper validation of specified type of input

33RIESGO

abrir ↗

Referência

CVE-2026-9504

CVE-2026-9504MEDIUM

GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds

33RIESGO

abrir ↗

Referência

CVE-2018-25367

CVE-2018-25367MEDIUM

NASA openVSP 3.16.1 Denial of Service via Buffer Overflow

33RIESGO

abrir ↗

Referência

CVE-2018-25364

CVE-2018-25364HIGH

Twitter-Clone 1 SQL Injection via search.php

41RIESGO

abrir ↗

Referência

CVE-2018-25363

CVE-2018-25363MEDIUM

Twitter-Clone 1 Cross-Site Request Forgery via tweetdel.php

33RIESGO

abrir ↗

Referência

CVE-2018-25362

CVE-2018-25362HIGH

Twitter-Clone 1 SQL Injection via follow.php

41RIESGO

abrir ↗

Referência

CVE-2018-25361

CVE-2018-25361HIGH

Soroush IM Desktop App 0.17.0 Authentication Bypass via Database Injection

41RIESGO

abrir ↗

Referência

CVE-2018-25360

CVE-2018-25360HIGH

AgataSoft Auto PingMaster 1.5 Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2026-9463

CVE-2026-9463HIGH

Edimax EW-7438RPn formLicence stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-9461

CVE-2026-9461HIGH

Edimax EW-7438RPn formRadius stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-11486

CVE-2026-11486MEDIUM

SourceCodester Class and Exam Timetabling System archive1.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11485

CVE-2026-11485MEDIUM

SourceCodester Class and Exam Timetabling System archive2.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11480

CVE-2026-11480MEDIUM

Chengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11479

CVE-2026-11479LOW

yoanbernabeu grepai Qdrant Backend chunker.go weak hash

28RIESGO

abrir ↗

Referência

CVE-2026-11478

CVE-2026-11478MEDIUM

kokke tiny-regex-c Pattern re.c matchstar redos

33RIESGO

abrir ↗

Referência

CVE-2023-54351

CVE-2023-54351MEDIUM

WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.