Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.324exploits catalogados

36.054CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientes populares riesgo

22.721 exploits

Referência

CVE-2019-25726

CVE-2019-25726HIGH

All in One Video Downloader 1.2 SQL Injection via admin page-edit

41RIESGO

abrir ↗

Referência

CVE-2026-10160

CVE-2026-10160HIGH

TRENDnet TEW-432BRP formSetEnableWizard stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-10159

CVE-2026-10159HIGH

TRENDnet TEW-432BRP formSysLog stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-10158

CVE-2026-10158HIGH

TRENDnet TEW-432BRP formPortFw stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-15471

CVE-2026-15471MEDIUM

Eleveo Call Recording Software pci_dss_status.jsp improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-15470

CVE-2026-15470MEDIUM

Eleveo Call Recording Software group.jsp improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-15311

CVE-2026-15311MEDIUM

NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-10810

CVE-2026-10810MEDIUM

itsourcecode Fees Management System navbar.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-7716

CVE-2026-7716MEDIUM

code-projects Gym Management System In PHP/Windows NT index.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7071

CVE-2026-7071MEDIUM

CodeAstro Online Job Portal user-cvs file information disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-7070

CVE-2026-7070MEDIUM

code-projects Inventory Management System Login sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7069

CVE-2026-7069HIGH

D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-15547

CVE-2026-15547MEDIUM

Shibby Tomato CIFS Mount sub_2D048 os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-47123

CVE-2026-47123HIGH

FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path

41RIESGO

abrir ↗

Referência

CVE-2026-75012

CVE-2026-75012HIGH

TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference

41RIESGO

abrir ↗

Referência

CVE-2026-19997

CVE-2026-19997MEDIUM

Webkul Bagisto Backend Sales RMA Endpoint requests authorization

33RIESGO

abrir ↗

Referência

CVE-2011-4340

CVE-2011-4340—

Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow

23RIESGO

abrir ↗

Referência

CVE-2026-19996

CVE-2026-19996MEDIUM

Webkul Bagisto Backend Customer Behavior Data Endpoint customers privileges management

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Minichat 6.0 - 'ftag.php' Remote File Inclusion

CVE-2006-5283—webappsphp

PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP cod

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS - Private Messaging Component SQL Injection

CVE-2008-6078—webappsphp

SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote att

23RIESGO

abrir ↗

Referência

CVE-2026-15696

CVE-2026-15696HIGH

Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow

41RIESGO

abrir ↗

Referência

Security research on Craft CMS authentication mechanism

CVE-2026-31266HIGH

Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate

41RIESGO

abrir ↗

Referência

CVE-2021-47935

CVE-2021-47935HIGH

Sentry 8.2.0 Remote Code Execution via Pickle Deserialization

41RIESGO

abrir ↗

Referência

CVE-2026-29004

CVE-2026-29004HIGH

BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS

41RIESGO

abrir ↗

Referência

CVE-2026-7718

CVE-2026-7718MEDIUM

Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection

33RIESGO

abrir ↗

Referência

CVE-2026-7717

CVE-2026-7717HIGH

Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-7024

CVE-2026-7024MEDIUM

rawchen sims deleteFileServlet Endpoint DeleteFileServlet.java path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-6602

CVE-2026-6602MEDIUM

rickxy Hospital Management System his_admin_account.php unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2017-11911

CVE-2017-11911—

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

35RIESGO

abrir ↗

Referência

CVE-2026-19901

CVE-2026-19901CRITICAL

LB-LINK X-PRO easycwmp hard-coded credentials

48RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.