Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.324exploits catalogados
36.054CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.721 exploits
Referência
CVE-2026-6132
CVE-2026-6132CRITICAL
Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6131
CVE-2026-6131CRITICAL
Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6130
CVE-2026-6130MEDIUM
chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injection
33RIESGO
abrir ↗
Referência
CVE-2014-10013
CVE-2014-10013—
SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2026-5825
CVE-2026-5825MEDIUM
code-projects Simple Laundry System delmemberinfo.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-29923
CVE-2026-29923HIGH
The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a
41RIESGO
abrir ↗
Referência
CVE-2026-5824
CVE-2026-5824MEDIUM
code-projects Simple Laundry System userchecklogin.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5823
CVE-2026-5823MEDIUM
itsourcecode Construction Management System borrowed_tool_report.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5815
CVE-2026-5815HIGH
D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5814
CVE-2026-5814MEDIUM
PHPGurukul Online Course Registration check_availability.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2014-10020
CVE-2014-10020—
SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência
CVE-2026-5634
CVE-2026-5634MEDIUM
projectworlds Car Rental Project Parameter book_car.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5632
CVE-2026-5632MEDIUM
assafelovic gpt-researcher HTTP REST API Endpoint missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-5631
CVE-2026-5631MEDIUM
assafelovic gpt-researcher ws Endpoint server_utils.py extract_command_data code injection
33RIESGO
abrir ↗
Referência
CVE-2026-5630
CVE-2026-5630MEDIUM
assafelovic gpt-researcher Report API app.py cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5629
CVE-2026-5629HIGH
Belkin F9K1015 formSetFirewall stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5628
CVE-2026-5628HIGH
Belkin F9K1015 Setting formSetSystemSettings stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5625
CVE-2026-5625MEDIUM
assafelovic gpt-researcher WebSocket researcher.py cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5621
CVE-2026-5621MEDIUM
ChrisChinchilla Vale-MCP HTTP index.ts os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5620
CVE-2026-5620MEDIUM
itsourcecode Construction Management System Parameter borrowed_equip_report.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5619
CVE-2026-5619MEDIUM
Braffolk mcp-summarization-functions summarize_command mcp-server.ts os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5618
CVE-2026-5618MEDIUM
kalcaddle kodbox shareMake/shareCheck server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-5615
CVE-2026-5615MEDIUM
givanz Vvvebjs File Upload Endpoint upload.php cross site scripting
48RIESGO
abrir ↗
Referência
CVE-2026-5614
CVE-2026-5614HIGH
Belkin F9K1015 formSetPassword stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5605
CVE-2026-5605HIGH
Tenda CH22 WrlExtraSet formWrlExtraSet stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5604
CVE-2026-5604HIGH
Tenda CH22 Parameter CertLocalPrecreate formCertLocalPrecreate stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5603
CVE-2026-5603MEDIUM
elgentos magento2-dev-mcp index.ts executeMagerun2Command os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5602
CVE-2026-5602MEDIUM
Nor2-io heim-mcp new_heim_application tools.ts registerTools os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5601
CVE-2026-5601MEDIUM
Acrel Electrical Prepaid Cloud Platform Backup File bin.rar information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-5597
CVE-2026-5597MEDIUM
griptape-ai griptape ComputerTool tool.py path traversal
33RIESGO
abrir ↗
← anteriorpágina 703 / 758siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.