Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.958exploits catalogados
36.206CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8829Nuclei 4357Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.832 exploits
Referência
CVE-2018-25352
CVE-2018-25352HIGH
WordPress Ultimate Form Builder Lite 1.3.7 SQL Injection via entry_id
41RIESGO
abrir ↗
Referência
CVE-2018-25344
CVE-2018-25344HIGH
10-Strike Network Inventory Explorer 8.54 Buffer Overflow SEH
41RIESGO
abrir ↗
Referência
CVE-2018-25343
CVE-2018-25343MEDIUM
Smartshop 1 Cross-Site Request Forgery via editprofile.php
33RIESGO
abrir ↗
Referência
CVE-2026-8252
CVE-2026-8252MEDIUM
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference
33RIESGO
abrir ↗
Referência
CVE-2026-8248
CVE-2026-8248MEDIUM
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
33RIESGO
abrir ↗
Referência
CVE-2021-47953
CVE-2021-47953MEDIUM
OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password
33RIESGO
abrir ↗
Referência
CVE-2021-47951
CVE-2021-47951MEDIUM
WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL
33RIESGO
abrir ↗
Referência
CVE-2021-47950
CVE-2021-47950MEDIUM
Advanced Guestbook 2.4.4 Persistent XSS via Smilies
33RIESGO
abrir ↗
Referência
CVE-2021-47949
CVE-2021-47949HIGH
CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack
41RIESGO
abrir ↗
Referência
CVE-2021-47948
CVE-2021-47948MEDIUM
WordPress GetPaid Plugin 2.4.6 HTML Injection via Help Text
33RIESGO
abrir ↗
Referência
CVE-2021-47947
CVE-2021-47947MEDIUM
Projectsend r1295 Stored Cross-Site Scripting via files-edit.php
33RIESGO
abrir ↗
Referência
CVE-2021-47946
CVE-2021-47946MEDIUM
OpenCart 3.0.3.6 Account Takeover via Cross Site Request Forgery
33RIESGO
abrir ↗
Referência
CVE-2021-47945
CVE-2021-47945HIGH
Argus Surveillance DVR 4.0 Unquoted Service Path Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2021-47938
CVE-2021-47938HIGH
ImpressCMS 1.4.2 Remote Code Execution via Autotasks
41RIESGO
abrir ↗
Referência
CVE-2021-47937
CVE-2021-47937HIGH
e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme Upload
41RIESGO
abrir ↗
Referência
CVE-2026-8349
CVE-2026-8349MEDIUM
omec-project amf NGAP Message memory corruption
33RIESGO
abrir ↗
Referência
CVE-2026-8253
CVE-2026-8253MEDIUM
Devs Palace ERP Online purchase_save cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-8291
CVE-2026-8291MEDIUM
Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-16225
CVE-2026-16225MEDIUM
davenardella snap7 s7_peer.cpp NegotiatePDULength out-of-bounds write
33RIESGO
abrir ↗
Referência
CVE-2026-16223
CVE-2026-16223MEDIUM
1Panel-dev CordysCRM Third Party Edit Endpoint IntegrationConfigService.java getSqlBotSrc server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-16488
CVE-2026-16488LOW
QUSETIONS MiniCode-Python Project File config.py subprocess.Popen os command injection
28RIESGO
abrir ↗
Referência
CVE-2026-16485
CVE-2026-16485MEDIUM
SourceCodester Class and Exam Timetabling System class.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-16222
CVE-2026-16222MEDIUM
1Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-63731
CVE-2026-63731MEDIUM
HyperDX < 2.31.0 SSRF via ClickHouse Proxy Test Endpoint
33RIESGO
abrir ↗
Referência
CVE-2026-63107
CVE-2026-63107MEDIUM
LimeSurvey SSRF via REST API Survey Template Host Header
33RIESGO
abrir ↗
Referência
CVE-2026-16252
CVE-2026-16252MEDIUM
Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Mod FileBase 2.0 - 'id' SQL Injection
CVE-2008-1305—webappsphp
SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2026-15699
CVE-2026-15699MEDIUM
spencermountain compromise Public Root API extend.js nlp.extend prototype pollution
33RIESGO
abrir ↗
Referência
CVE-2026-58477
CVE-2026-58477HIGH
Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters
41RIESGO
abrir ↗
Referência
CVE-2026-60114
CVE-2026-60114HIGH
Sustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup Restore
41RIESGO
abrir ↗
← anteriorpágina 744 / 762siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.