Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.958exploits catalogados
36.206CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8829Nuclei 4357Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.832 exploits
Referência
CVE-2026-16489
CVE-2026-16489MEDIUM
jsforce SFDX Connection Registry sfdx.js _execCommand os command injection
33RIESGO
abrir ↗
Referência
CVE-2018-25383
CVE-2018-25383HIGH
Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass
41RIESGO
abrir ↗
Referência
CVE-2026-10126
CVE-2026-10126HIGH
Edimax BR-6478AC POST Request formQoS buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-64821
CVE-2026-64821MEDIUM
djangoSIGE 1.10 CSRF via GET-based Order Cancellation Views
33RIESGO
abrir ↗
Referência
CVE-2026-16447
CVE-2026-16447MEDIUM
D-Link DNS-320 multi_uploadify.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-14184
CVE-2026-14184MEDIUM
Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-14183
CVE-2026-14183MEDIUM
Classified Listing < 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-9833
CVE-2026-9833HIGH
Tag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' Parameter
41RIESGO
abrir ↗
Referência
CVE-2026-10208
CVE-2026-10208MEDIUM
code-projects Online Hospital Management System login_1.php login_user sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-10206
CVE-2026-10206HIGH
D-Link DI-8400 dbsrv.asp stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-10183
CVE-2026-10183HIGH
TRENDnet TEW-432BRP formWlanSetup stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-10166
CVE-2026-10166MEDIUM
Edimax BR-6478AC POST Request formWlbasic command injection
33RIESGO
abrir ↗
Referência
CVE-2026-10272
CVE-2026-10272MEDIUM
a4m4 Student-Management-System deleteform.php improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-10271
CVE-2026-10271MEDIUM
a4m4 Student-Management-System Admin Endpoint admin redirect
33RIESGO
abrir ↗
Referência✓ VexDay Proof
faceStones personal 2.0.42 - 'fs_form_links.php' File Inclusion
CVE-2006-5070—webappsphp
PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allo
23RIESGO
abrir ↗
Referência
CVE-2026-9460
CVE-2026-9460HIGH
Edimax EW-7438RPn formAccept stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9459
CVE-2026-9459HIGH
Edimax EW-7438RPn formConnectionSetting stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9458
CVE-2026-9458CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9457
CVE-2026-9457CRITICAL
Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9451
CVE-2026-9451MEDIUM
code-projects Employee Management System applyleaveprocess.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Polaring 0.04.03 - 'general.php' Remote File Inclusion
CVE-2006-5078—webappsphp
PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remot
23RIESGO
abrir ↗
Referência
CVE-2018-17591
CVE-2018-17591—
AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
paBugs 2.0 Beta 3 - 'class.mysql.php' Remote File Inclusion
CVE-2006-5079—webappsphp
PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
evoBB 0.3 - 'path' Remote File Inclusion
CVE-2006-5087—webappsphp
Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2018-17591
CVE-2018-17591—
AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
A-Blog 2.0 - 'menu.php' Remote File Inclusion
CVE-2006-5092—webappsphp
PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2026-10161
CVE-2026-10161HIGH
TRENDnet TEW-432BRP formResetStatistic stack-based overflow
41RIESGO
abrir ↗
Referência✓ VexDay Proof
TagIt! Tagboard 2.1.b b2 - 'index.php' Remote File Inclusion
CVE-2006-5093—webappsphp
PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows re
23RIESGO
abrir ↗
Referência
CVE-2026-10209
CVE-2026-10209MEDIUM
code-projects Online Hospital Management System Appointment appointmentdetail.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9359
CVE-2026-9359MEDIUM
Edimax EW-7438RPn POST Request formHwSet command injection
33RIESGO
abrir ↗
← anteriorpágina 751 / 762siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.