Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.258exploits catalogados
36.019CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8811Nuclei 4349Metasploit 3488✓ solo verificadosrecientespopularesriesgo
22.657 exploits
Referência
CVE-2018-25292
CVE-2018-25292MEDIUM
Bome Restorator 1793 Denial of Service via Buffer Overflow
33RIESGO
abrir ↗
Referência
CVE-2018-25291
CVE-2018-25291MEDIUM
Project64 2.3.2 Denial of Service via Plugin Directory
33RIESGO
abrir ↗
Referência
CVE-2018-25290
CVE-2018-25290MEDIUM
Easyboot 6.6.0 Buffer Overflow Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2018-25289
CVE-2018-25289MEDIUM
Softdisk 3.0.3 Buffer Overflow Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2018-25288
CVE-2018-25288MEDIUM
StyleWriter 1.0 Denial of Service via Pattern Input
33RIESGO
abrir ↗
Referência
CVE-2026-5970
CVE-2026-5970MEDIUM
FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection
33RIESGO
abrir ↗
Referência
CVE-2026-5962
CVE-2026-5962MEDIUM
Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-5961
CVE-2026-5961MEDIUM
code-projects Simple IT Discussion Forum topic-details.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5960
CVE-2026-5960MEDIUM
code-projects Patient Record Management System SQL Database Backup File hcpms.sql information disclosure
33RIESGO
abrir ↗
Referência
CVE-2016-20055
CVE-2016-20055HIGH
IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2026-12582
CVE-2026-12582HIGH
Library Management System < 3.5.8 - Unauthenticated SQL Injection via book_id
41RIESGO
abrir ↗
Referência
CVE-2026-15535
CVE-2026-15535MEDIUM
AkariAsai self-rag retrieval_lm index.py Indexer.deserialize_from deserialization
33RIESGO
abrir ↗
Referência
CVE-2010-4838
CVE-2010-4838—
SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users
23RIESGO
abrir ↗
Referência
CVE-2026-15531
CVE-2026-15531MEDIUM
yashbhalgat HashNeRF-pytorch Checkpoint File run_nerf.py torch.load deserialization
33RIESGO
abrir ↗
Referência
CVE-2026-15530
CVE-2026-15530MEDIUM
WuzhiCMS Attachment API index.php listimage information disclosure
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component com_jim 1.0.1 - Remote File Inclusion
CVE-2006-4242—webappsphp
PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote
23RIESGO
abrir ↗
Referência
CVE-2014-2623
CVE-2014-2623—
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown
60RIESGO
abrir ↗
Referência
CVE-2014-2671
CVE-2014-2671—
Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corrupt
35RIESGO
abrir ↗
Referência
CVE-2026-6574
CVE-2026-6574MEDIUM
osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials
33RIESGO
abrir ↗
Referência
CVE-2026-6562
CVE-2026-6562MEDIUM
dameng100 muucmf index.html getListByPage sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6561
CVE-2026-6561MEDIUM
EyouCMS Index.php edit_adminlogo unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-6560
CVE-2026-6560HIGH
H3C Magic B0 aspForm Edit_BasicSSID buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5811
CVE-2026-5811MEDIUM
SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error
33RIESGO
abrir ↗
Referência
CVE-2026-5810
CVE-2026-5810MEDIUM
SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5668
CVE-2026-5668MEDIUM
Cyber-III Student-Management-System add%20notice.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5611
CVE-2026-5611HIGH
Belkin F9K1015 formCrossBandSwitch stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5610
CVE-2026-5610HIGH
Belkin F9K1015 formWISP5G stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5609
CVE-2026-5609HIGH
Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5608
CVE-2026-5608HIGH
Belkin F9K1122 formWlanSetup stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5607
CVE-2026-5607MEDIUM
imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery
33RIESGO
abrir ↗
← anteriorpágina 687 / 756siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.