Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.958exploits catalogados
36.206CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8829Nuclei 4357Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.832 exploits
Referência
CVE-2018-25360
CVE-2018-25360HIGH
AgataSoft Auto PingMaster 1.5 Buffer Overflow SEH
41RIESGO
abrir ↗
Referência
CVE-2026-13558
CVE-2026-13558MEDIUM
CodeAstro Complaint Management System Report addreport cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-54092
CVE-2026-54092MEDIUM
File Browser: DoS Vulnerability on Public Login API
33RIESGO
abrir ↗
Referência
CVE-2026-9463
CVE-2026-9463HIGH
Edimax EW-7438RPn formLicence stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9461
CVE-2026-9461HIGH
Edimax EW-7438RPn formRadius stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-13557
CVE-2026-13557MEDIUM
itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-53264
CVE-2026-53264HIGH
net/sched: act_api: use RCU with deferred freeing for action lifecycle
41RIESGO
abrir ↗
Referência
CVE-2018-17588
CVE-2018-17588—
AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpQuestionnaire 3.12 - 'phpQRootDir' Remote File Inclusion
CVE-2006-4966—webappsphp
PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote at
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PNPHPBB2 < 1.2g - 'phpbb_root_path' Remote File Inclusion
CVE-2006-4968—webappsphp
PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to execu
23RIESGO
abrir ↗
Referência
CVE-2026-34102
CVE-2026-34102HIGH
Guardian Language-System SQL Injection via id Parameter in job_info_get.php
41RIESGO
abrir ↗
Referência
CVE-2026-58454
CVE-2026-58454HIGH
JAIOTlink C492A-W6 4.8.30.57701411 RCE via /Anyka/config Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-13556
CVE-2026-13556MEDIUM
itsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-13555
CVE-2026-13555MEDIUM
itsourcecode Online Hotel Management System controller.php add sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
PowerPortal 1.3a - 'index.php' Remote File Inclusion
CVE-2006-5126—webappsphp
PHP remote file inclusion vulnerability in index.php in John Himmelman (aka DaRk2k1) PowerPortal 1.3a allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
A-Blog 2.0 - Multiple Remote File Inclusions
CVE-2006-5135—webappsphp
Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Krazy Image Hosting 0.7a - 'display.php' SQL Injection
CVE-2006-5140—webappsphp
SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote at
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Internet Explorer 6 - 'Content-Type' Stack Overflow Crash
CVE-2006-5162—doswindows
wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unh
35RIESGO
abrir ↗
Referência✓ VexDay Proof
PPA Gallery 1.0 - 'functions.inc.php' Remote File Inclusion
CVE-2006-5165—webappsphp
PHP remote file inclusion vulnerability in inc/functions.inc.php in Skrypty PPA Gallery 1.0 and earlier allows remote at
23RIESGO
abrir ↗
Referência
CVE-2018-17593
CVE-2018-17593—
AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BasiliX 1.1.1 - 'BSX_LIBDIR' Remote File Inclusion
CVE-2006-5167—webappsphp
Multiple PHP remote file inclusion vulnerabilities in BasiliX 1.1.1 and earlier allow remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2018-17593
CVE-2018-17593—
AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Newswriter SW 1.4.2 - 'main.inc.php' Remote File Inclusion
CVE-2006-5180—webappsphp
PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2018-17775
CVE-2018-17775—
Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local us
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
← anteriorpágina 749 / 762siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.