Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.258exploits catalogados
36.019CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8811Nuclei 4349Metasploit 3488✓ solo verificadosrecientespopularesriesgo
22.657 exploits
Referência
CVE-2026-15373
CVE-2026-15373MEDIUM
Eleveo Call Recording Software userAddAction.do improper authorization
33RIESGO
abrir ↗
Referência
CVE-2019-3398
CVE-2019-3398HIGHbajo ataque
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote at
100RIESGO
abrir ↗
Referência
CVE-2019-3398
CVE-2019-3398HIGHbajo ataque
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote at
100RIESGO
abrir ↗
Referência
CVE-2014-6332
CVE-2014-6332HIGHbajo ataque
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
100RIESGO
abrir ↗
Referência
CVE-2026-15190
CVE-2026-15190MEDIUM
SourceCodester Simple and Nice Shopping Cart Script login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-11406
CVE-2026-11406MEDIUM
GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection
33RIESGO
abrir ↗
Referência
CVE-2019-25727
CVE-2019-25727CRITICAL
WordPress Plugin ad manager wd 1.0.11 Arbitrary File Download
48RIESGO
abrir ↗
Referência
CVE-2019-25726
CVE-2019-25726HIGH
All in One Video Downloader 1.2 SQL Injection via admin page-edit
41RIESGO
abrir ↗
Referência
CVE-2026-10160
CVE-2026-10160HIGH
TRENDnet TEW-432BRP formSetEnableWizard stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-10159
CVE-2026-10159HIGH
TRENDnet TEW-432BRP formSysLog stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-10158
CVE-2026-10158HIGH
TRENDnet TEW-432BRP formPortFw stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-15471
CVE-2026-15471MEDIUM
Eleveo Call Recording Software pci_dss_status.jsp improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-15470
CVE-2026-15470MEDIUM
Eleveo Call Recording Software group.jsp improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-15311
CVE-2026-15311MEDIUM
NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-10810
CVE-2026-10810MEDIUM
itsourcecode Fees Management System navbar.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-7716
CVE-2026-7716MEDIUM
code-projects Gym Management System In PHP/Windows NT index.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7071
CVE-2026-7071MEDIUM
CodeAstro Online Job Portal user-cvs file information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-7070
CVE-2026-7070MEDIUM
code-projects Inventory Management System Login sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7069
CVE-2026-7069HIGH
D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-15547
CVE-2026-15547MEDIUM
Shibby Tomato CIFS Mount sub_2D048 os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-47123
CVE-2026-47123HIGH
FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path
41RIESGO
abrir ↗
Referência
CVE-2026-29009
CVE-2026-29009HIGH
U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK
41RIESGO
abrir ↗
Referência
CVE-2026-15703
CVE-2026-15703MEDIUM
SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-25388
CVE-2018-25388HIGH
HaPe PKH 1.1 Arbitrary File Upload via aksi_foto.php
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Rianxosencabos CMS 0.9 - Blind SQL Injection
CVE-2008-6014—webappsphp
SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2018-25387
CVE-2018-25387MEDIUM
HaPe PKH 1.1 Cross-Site Request Forgery via aksi_user.php
33RIESGO
abrir ↗
Referência
CVE-2018-25386
CVE-2018-25386HIGH
HaPe PKH 1.1 SQL Injection via id Parameter in admin/media.php
41RIESGO
abrir ↗
Referência
CVE-2018-25385
CVE-2018-25385HIGH
E-Registrasi Pencak Silat 18.10 SQL Injection via id_partai
41RIESGO
abrir ↗
Referência
CVE-2018-25384
CVE-2018-25384MEDIUM
Wikidforum 2.20 Cross-Site Scripting via reply_text Parameter
33RIESGO
abrir ↗
Referência
CVE-2014-7169
CVE-2014-7169CRITICALbajo ataque
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RIESGO
abrir ↗
← anteriorpágina 684 / 756siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.