Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.149exploits catalogados
35.965CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4349Metasploit 3488✓ solo verificadosrecientespopularesriesgo
22.657 exploits
Referência
CVE-2026-6030
CVE-2026-6030MEDIUM
itsourcecode Construction Management System del1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6029
CVE-2026-6029CRITICAL
Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6028
CVE-2026-6028CRITICAL
Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6027
CVE-2026-6027CRITICAL
Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-4432
CVE-2026-4432MEDIUM
YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated Arbitrary Wishlist Renaming via IDOR
33RIESGO
abrir ↗
Referência
CVE-2025-14545
CVE-2025-14545MEDIUM
YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via Feed Generation
33RIESGO
abrir ↗
Referência
CVE-2026-6026
CVE-2026-6026CRITICAL
Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6025
CVE-2026-6025CRITICAL
Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6024
CVE-2026-6024MEDIUM
Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-6016
CVE-2026-6016HIGH
Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-6015
CVE-2026-6015HIGH
Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2018-25287
CVE-2018-25287MEDIUM
Drive Power Manager 1.10 Denial of Service via Name Field
33RIESGO
abrir ↗
Referência
CVE-2018-25286
CVE-2018-25286MEDIUM
Easy PhotoResQ 1.0 Buffer Overflow Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2018-25285
CVE-2018-25285MEDIUM
Fathom 2.4 Denial of Service via Authorization Code Buffer Overflow
33RIESGO
abrir ↗
Referência
CVE-2018-25284
CVE-2018-25284MEDIUM
HD Tune Pro 5.70 Denial of Service via Options Dialog
33RIESGO
abrir ↗
Referência
CVE-2018-25283
CVE-2018-25283HIGH
iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter
41RIESGO
abrir ↗
Referência
CVE-2018-25282
CVE-2018-25282MEDIUM
Nmap 7.70 Denial of Service via XML Entity Expansion
33RIESGO
abrir ↗
Referência
CVE-2018-25281
CVE-2018-25281MEDIUM
iCash 7.6.5 Denial of Service via Connect to Server
33RIESGO
abrir ↗
Referência
CVE-2018-25280
CVE-2018-25280MEDIUM
Infiltrator Network Security Scanner 4.6 Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2018-25279
CVE-2018-25279MEDIUM
jiNa OCR Image to Text 1.0 Denial of Service via PNG
33RIESGO
abrir ↗
Referência
CVE-2018-25278
CVE-2018-25278MEDIUM
PicaJet FX 2.6.5 Denial of Service via Registration Fields
33RIESGO
abrir ↗
Referência
CVE-2026-5806
CVE-2026-5806MEDIUM
code-projects Easy Blog Site update.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5805
CVE-2026-5805MEDIUM
code-projects Easy Blog Site contact_us.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5803
CVE-2026-5803MEDIUM
bigsk1 openai-realtime-ui API Proxy Endpoint server.js server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-5802
CVE-2026-5802MEDIUM
idachev mcp-javadc HTTP os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-4338
CVE-2026-4338HIGH
ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure
41RIESGO
abrir ↗
Referência
CVE-2026-5741
CVE-2026-5741MEDIUM
suvarchal docker-mcp-server HTTP index.ts pull_image os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-15526
CVE-2026-15526MEDIUM
augmnt augments-mcp-server scan_project_deps scan-project-deps.ts scanProjectDeps path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-15478
CVE-2026-15478MEDIUM
IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-0971
CVE-2018-0971—
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio
23RIESGO
abrir ↗
← anteriorpágina 668 / 756siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.