Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.324exploits catalogados

36.054CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientes populares riesgo

22.721 exploits

Referência

CVE-2026-6608

CVE-2026-6608MEDIUM

lm-sys fastchat Arena Side-by-Side View add_text control flow

33RIESGO

abrir ↗

Referência

CVE-2026-6607

CVE-2026-6607MEDIUM

lm-sys fastchat Worker API Endpoint api_generate resource consumption

33RIESGO

abrir ↗

Referência

CVE-2026-6606

CVE-2026-6606MEDIUM

modelscope agentscope _agent_base.py _process_audio_block server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-6605

CVE-2026-6605MEDIUM

modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-6604

CVE-2026-6604MEDIUM

modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-6603

CVE-2026-6603MEDIUM

modelscope agentscope _python.py execute_shell_command code injection

33RIESGO

abrir ↗

Referência

CVE-2013-0230

CVE-2013-0230—

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP

50RIESGO

abrir ↗

Referência

CVE-2023-54360

CVE-2023-54360MEDIUM

Joomla JLex Review 6.0.1 Reflected XSS via review_id Parameter

33RIESGO

abrir ↗

Referência

CVE-2023-54359

CVE-2023-54359HIGH

WordPress adivaha Travel Plugin 2.3 SQL Injection via pid

41RIESGO

abrir ↗

Referência

CVE-2023-54358

CVE-2023-54358MEDIUM

WordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobile

33RIESGO

abrir ↗

Referência

CVE-2026-5979

CVE-2026-5979HIGH

D-Link DIR-605L POST Request formVirtualServ buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5977

CVE-2026-5977CRITICAL

Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-5976

CVE-2026-5976CRITICAL

Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-5975

CVE-2026-5975CRITICAL

Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-5973

CVE-2026-5973MEDIUM

FoundationAgents MetaGPT common.py get_mime_type os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-5972

CVE-2026-5972MEDIUM

FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-39912

CVE-2026-39912CRITICAL

v2board / Xboard Authentication Token Exposure via loginWithMailLink

48RIESGO

abrir ↗

Referência

CVE-2026-5971

CVE-2026-5971MEDIUM

FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection

33RIESGO

abrir ↗

Referência

CVE-2026-5847

CVE-2026-5847MEDIUM

code-projects Movie Ticketing System SQL Database Backup File moviedb.sql information disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-5844

CVE-2026-5844HIGH

D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection

41RIESGO

abrir ↗

Referência

CVE-2026-5842

CVE-2026-5842MEDIUM

decolua 9router Administrative API Endpoint api authorization

33RIESGO

abrir ↗

Referência

CVE-2026-5841

CVE-2026-5841MEDIUM

Tenda i3 HTTP R7WebsSecurityHandler path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5840

CVE-2026-5840MEDIUM

PHPGurukul News Portal Project check_availability.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5839

CVE-2026-5839MEDIUM

PHPGurukul News Portal Project add-subcategory.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5838

CVE-2026-5838MEDIUM

PHPGurukul News Portal Project add-subadmins.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5837

CVE-2026-5837MEDIUM

PHPGurukul News Portal Project news-details.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5836

CVE-2026-5836MEDIUM

code-projects Online Shoe Store admin_product.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5835

CVE-2026-5835MEDIUM

code-projects Online Shoe Store admin_football.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5834

CVE-2026-5834MEDIUM

code-projects Online Shoe Store admin_running.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5833

CVE-2026-5833MEDIUM

awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injection

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.