Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.057exploits catalogados
36.288CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8843Nuclei 4358Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.910 exploits
Referência
CVE-2026-16154
CVE-2026-16154MEDIUM
SourceCodester Class and Exam Timetabling System edit_room1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-16152
CVE-2026-16152MEDIUM
SourceCodester Class and Exam Timetabling System edit_rooma.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-25424
CVE-2018-25424HIGH
Gate Pass Management System 2.1 SQL Injection via login-exec.php
41RIESGO
abrir ↗
Referência
CVE-2026-16133
CVE-2026-16133LOW
LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection
28RIESGO
abrir ↗
Referência
CVE-2026-16131
CVE-2026-16131MEDIUM
itsourcecode Hospital Management System prescriptionrecord.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-25423
CVE-2018-25423MEDIUM
Arm Whois 3.11 Denial of Service via Buffer Overflow
33RIESGO
abrir ↗
Referência
CVE-2018-25418
CVE-2018-25418HIGH
AiOPMSD Final 1.0.0 SQL Injection via year.php
41RIESGO
abrir ↗
Referência
CVE-2018-25413
CVE-2018-25413HIGH
AiOPMSD Final 1.0.0 SQL Injection via search.php
41RIESGO
abrir ↗
Referência
CVE-2018-25412
CVE-2018-25412CRITICAL
Delta Sql 1.8.2 Arbitrary File Upload via docs_upload.php
48RIESGO
abrir ↗
Referência
CVE-2018-25411
CVE-2018-25411HIGH
MGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php
41RIESGO
abrir ↗
Referência
CVE-2026-9833
CVE-2026-9833HIGH
Tag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' Parameter
41RIESGO
abrir ↗
Referência
CVE-2026-11349
CVE-2026-11349HIGH
Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more
41RIESGO
abrir ↗
Referência
CVE-2018-25383
CVE-2018-25383HIGH
Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass
41RIESGO
abrir ↗
Referência
CVE-2026-10755
CVE-2026-10755LOW
All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI Integration
28RIESGO
abrir ↗
Referência
CVE-2026-16489
CVE-2026-16489MEDIUM
jsforce SFDX Connection Registry sfdx.js _execCommand os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-10126
CVE-2026-10126HIGH
Edimax BR-6478AC POST Request formQoS buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-10081
CVE-2026-10081HIGH
Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget
41RIESGO
abrir ↗
Referência
CVE-2026-64821
CVE-2026-64821MEDIUM
djangoSIGE 1.10 CSRF via GET-based Order Cancellation Views
33RIESGO
abrir ↗
Referência
CVE-2026-10208
CVE-2026-10208MEDIUM
code-projects Online Hospital Management System login_1.php login_user sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-10206
CVE-2026-10206HIGH
D-Link DI-8400 dbsrv.asp stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-10183
CVE-2026-10183HIGH
TRENDnet TEW-432BRP formWlanSetup stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-10166
CVE-2026-10166MEDIUM
Edimax BR-6478AC POST Request formWlbasic command injection
33RIESGO
abrir ↗
Referência
CVE-2026-10272
CVE-2026-10272MEDIUM
a4m4 Student-Management-System deleteform.php improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-10271
CVE-2026-10271MEDIUM
a4m4 Student-Management-System Admin Endpoint admin redirect
33RIESGO
abrir ↗
Referência✓ VexDay Proof
faceStones personal 2.0.42 - 'fs_form_links.php' File Inclusion
CVE-2006-5070—webappsphp
PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allo
23RIESGO
abrir ↗
Referência
CVE-2026-9460
CVE-2026-9460HIGH
Edimax EW-7438RPn formAccept stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9459
CVE-2026-9459HIGH
Edimax EW-7438RPn formConnectionSetting stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9458
CVE-2026-9458CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9457
CVE-2026-9457CRITICAL
Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9451
CVE-2026-9451MEDIUM
code-projects Employee Management System applyleaveprocess.php sql injection
33RIESGO
abrir ↗
← anteriorpágina 754 / 764siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.