Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.958exploits catalogados
36.206CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8829Nuclei 4357Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.832 exploits
Referência
CVE-2026-14305
CVE-2026-14305MEDIUM
WP Delicious < 1.10.2 - Unauthenticated Arbitrary Post Meta Update via recipe_likes
33RIESGO
abrir ↗
Referência✓ VexDay Proof
SazCart 1.5 - 'cart.php' Remote File Inclusion
CVE-2006-5727—webappsphp
PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service
CVE-2006-5728—doswindows
XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long
23RIESGO
abrir ↗
Referência
CVE-2018-18763
CVE-2018-18763—
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
T.G.S. CMS 0.1.7 - 'logout.php' SQL Injection
CVE-2006-5732—webappsphp
SQL injection vulnerability in logout.php in T.G.S. CMS 0.1.7 and earlier allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2018-18763
CVE-2018-18763—
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PostNuke 0.763 - 'PNSV lang' Remote Code Execution
CVE-2006-5733—webappsphp
Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and exec
23RIESGO
abrir ↗
Referência
CVE-2026-14802
CVE-2026-14802MEDIUM
react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-14800
CVE-2026-14800MEDIUM
imhamzaazam ecommerceFlask cross-site request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-6382
CVE-2026-6382CRITICAL
Multiple elFinder Plugins - Authenticated OS Command Injection
48RIESGO
abrir ↗
Referência
CVE-2026-13499
CVE-2026-13499MEDIUM
yashpokharna2555 restaurent-management-system Registration login_register.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-13498
CVE-2026-13498MEDIUM
yashpokharna2555 restaurent-management-system POST Parameter forgotpassword.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13497
CVE-2026-13497MEDIUM
itsourcecode Hospital Management System appointment.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13496
CVE-2026-13496MEDIUM
itsourcecode Hospital Management System ajaxmedicine.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Internet Explorer 6/7 - XML Core Services Remote Code Execution (1)
CVE-2006-5745—remotewindows
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML
60RIESGO
abrir ↗
Referência✓ VexDay Proof
QnECMS 2.5.6 - 'adminfolderpath' Remote File Inclusion
CVE-2006-5627—webappsphp
Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitra
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Free Image Hosting 1.0 - 'forgot_pass.php' File Inclusion
CVE-2006-5670—webappsphp
PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MySource CMS 2.16.2 - 'init_mysource.php' Remote File Inclusion
CVE-2006-5672—webappsphp
PHP remote file inclusion vulnerability in web/init_mysource.php in MySource CMS 2.16.2 and earlier allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2026-13495
CVE-2026-13495MEDIUM
itsourcecode Hospital Management System adminprofile.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
MiniBB 2.0.2 - 'bb_func_txt.php' Remote File Inclusion
CVE-2006-5673—webappsphp
PHP remote file inclusion vulnerability in bb_func_txt.php in miniBB 2.0.2 and earlier, when register_globals is enabled
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPEasyData Pro 2.2.2 - 'index.php' SQL Injection
CVE-2006-5707—webappsphp
SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AEP SmartGate 4.3b - 'GET' Arbitrary File Download
CVE-2006-5725—remotewindows
The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request
23RIESGO
abrir ↗
Referência
CVE-2018-25359
CVE-2018-25359HIGH
Splinterware System Scheduler Pro 5.12 Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2026-9464
CVE-2026-9464MEDIUM
YunaiV yudao-cloud Admin API Endpoint create IotDataSinkHttpConfig server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-9462
CVE-2026-9462HIGH
Edimax EW-7438RPn formWpsProxyEnable stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9425
CVE-2026-9425HIGH
Edimax EW-7438RPn formWlanMP stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9424
CVE-2026-9424MEDIUM
Edimax EW-7438RPn Content-Type formWlanMP os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-9423
CVE-2026-9423MEDIUM
Edimax BR-6675nD POST Request mp command injection
33RIESGO
abrir ↗
Referência
CVE-2026-9419
CVE-2026-9419MEDIUM
code-projects Employee Management System empproject.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-9418
CVE-2026-9418MEDIUM
code-projects Employee Management System changepassemp.php cross site scripting
33RIESGO
abrir ↗
← anteriorpágina 752 / 762siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.