Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.258exploits catalogados

36.019CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8811Nuclei 4349Metasploit 3488✓ solo verificadosrecientes populares riesgo

22.657 exploits

Referência

CVE-2019-25710

CVE-2019-25710HIGH

Dolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter

41RIESGO

abrir ↗

Referência

CVE-2019-25709

CVE-2019-25709CRITICAL

CF Image Hosting Script 1.6.5 Unauthorized Database Access

48RIESGO

abrir ↗

Referência

CVE-2019-25708

CVE-2019-25708MEDIUM

Heatmiser Wifi Thermostat 1.7 Cross-Site Request Forgery

33RIESGO

abrir ↗

Referência

CVE-2019-25705

CVE-2019-25705HIGH

Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field

41RIESGO

abrir ↗

Referência

CVE-2019-25703

CVE-2019-25703HIGH

ImpressCMS 1.3.11 SQL Injection via bid Parameter

41RIESGO

abrir ↗

Referência

CVE-2019-25701

CVE-2019-25701HIGH

Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2019-25697

CVE-2019-25697HIGH

CMSsite 1.0 SQL Injection via category.php

41RIESGO

abrir ↗

Referência

CVE-2019-25695

CVE-2019-25695HIGH

R 3.4.4 Local Buffer Overflow Windows XP SP3

41RIESGO

abrir ↗

Referência

CVE-2019-25693

CVE-2019-25693HIGH

ResourceSpace 8.6 SQL Injection via collection_edit.php

41RIESGO

abrir ↗

Referência

CVE-2019-25691

CVE-2019-25691HIGH

Faleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass

41RIESGO

abrir ↗

Referência

CVE-2019-25689

CVE-2019-25689HIGH

HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH

41RIESGO

abrir ↗

Referência

CVE-2018-25258

CVE-2018-25258HIGH

RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass

41RIESGO

abrir ↗

Referência

CVE-2018-25257

CVE-2018-25257HIGH

Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile

41RIESGO

abrir ↗

Referência

CVE-2017-20239

CVE-2017-20239MEDIUM

MDwiki Cross-Site Scripting via Location Hash Parameter

33RIESGO

abrir ↗

Referência

CVE-2026-6126

CVE-2026-6126MEDIUM

zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Chaussette 080706 - '_BASE' Remote File Inclusion

CVE-2006-4159—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute ar

28RIESGO

abrir ↗

Referência

CVE-2010-4273

CVE-2010-4273—

SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência

CVE-2010-4273

CVE-2010-4273—

SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência

CVE-2026-77148

CVE-2026-77148CRITICAL

Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow

48RIESGO

abrir ↗

Referência

CVE-2016-4793

CVE-2016-4793—

The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP head

23RIESGO

abrir ↗

Referência

CVE-2026-14236

CVE-2026-14236MEDIUM

Contact Form 7 – PayPal & Stripe Add-on < 2.5 - Open Redirect

33RIESGO

abrir ↗

Referência

CVE-2026-14235

CVE-2026-14235HIGH

WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download Key

41RIESGO

abrir ↗

Referência

CVE-2026-7510

CVE-2026-7510MEDIUM

OWAP DefectDojo Benchmark/Engagement/Product/Survey authorization

33RIESGO

abrir ↗

Referência

CVE-2026-7508

CVE-2026-7508MEDIUM

Bootstrap CMS Page Creation show.blade.php code injection

33RIESGO

abrir ↗

Referência

CVE-2026-7506

CVE-2026-7506MEDIUM

SourceCodester Hotel Management System check sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7505

CVE-2026-7505MEDIUM

nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-7503

CVE-2026-7503HIGH

code-projects for Plugin cstecgi.cgi setWiFiMultipleConfig buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-7502

CVE-2026-7502MEDIUM

LinkStackOrg LinkStack Management Endpoint UserController.php saveLink authorization

33RIESGO

abrir ↗

Referência

CVE-2026-7501

CVE-2026-7501MEDIUM

LinkStackOrg LinkStack UserController.php editPage cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2022-50992

CVE-2022-50992HIGH

Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.