Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.057exploits catalogados
36.288CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8843Nuclei 4358Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.910 exploits
Referência
CVE-2026-19211
CVE-2026-19211MEDIUM
SourceCodester Photo Share Website ajax.php signup sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-15048
CVE-2026-15048HIGH
GeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat History
41RIESGO
abrir ↗
Referência
CVE-2026-14931
CVE-2026-14931MEDIUM
JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-14930
CVE-2026-14930HIGH
JS Help Desk < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload
41RIESGO
abrir ↗
Referência
CVE-2026-14929
CVE-2026-14929MEDIUM
JS Help Desk < 3.1.4 - Subscriber+ Ticket Reply Modification via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-14928
CVE-2026-14928MEDIUM
JS Help Desk < 3.1.4 - Subscriber+ Sensitive Information Disclosure via checkAIReplyTicketsBySubject
33RIESGO
abrir ↗
Referência
CVE-2026-14927
CVE-2026-14927LOW
FluentCart < 1.5.3 - Unauthenticated Order PII Disclosure via Print Routes
28RIESGO
abrir ↗
Referência
CVE-2026-14922
CVE-2026-14922MEDIUM
WP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component com_flyspray < 1.0.1 - Remote File Disclosure
CVE-2006-6203—webappsphp
Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray) component for Mambo allows re
23RIESGO
abrir ↗
Referência
CVE-2026-13597
CVE-2026-13597CRITICAL
QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover
48RIESGO
abrir ↗
Referência
CVE-2026-63720
CVE-2026-63720HIGH
datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field
41RIESGO
abrir ↗
Referência
CVE-2018-25351
CVE-2018-25351HIGH
Joomla! Component EkRishta 2.10 SQL Injection via username
41RIESGO
abrir ↗
Referência
CVE-2026-9299
CVE-2026-9299MEDIUM
omec-project amf handler.go PDUSessionResourceModifyIndication memory corruption
33RIESGO
abrir ↗
Referência
CVE-2026-9298
CVE-2026-9298MEDIUM
omec-project amf PathSwitchRequest memory corruption
33RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke NukeAI Module 3b - 'util.php' Remote File Inclusion
CVE-2006-6202—webappsphp
PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Pro
23RIESGO
abrir ↗
Referência
CVE-2019-2000
CVE-2019-2000—
In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local
23RIESGO
abrir ↗
Referência
CVE-2018-25410
CVE-2018-25410HIGH
SIM-PKH 2.4.1 SQL Injection via media.php id Parameter
41RIESGO
abrir ↗
Referência
CVE-2018-25409
CVE-2018-25409HIGH
SIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php
41RIESGO
abrir ↗
Referência
CVE-2026-9405
CVE-2026-9405CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9381
CVE-2026-9381HIGH
Edimax BR-6675nD POST Request formPPPoESetup buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9380
CVE-2026-9380HIGH
Edimax BR-6675nD POST Request formL2TPSetup buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2018-25408
CVE-2018-25408HIGH
The Open ISES Project 3.30A Path Traversal Arbitrary File Download
41RIESGO
abrir ↗
Referência
CVE-2026-13511
CVE-2026-13511LOW
VoltAgent Memory REST API memory.handlers.ts handleGetMemoryConversation improper authorization
28RIESGO
abrir ↗
Referência✓ VexDay Proof
CoolPlayer 2.17 - '.m3u' Local Stack Overflow
CVE-2006-6288—localwindows
Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code via
23RIESGO
abrir ↗
Referência
CVE-2026-50656
CVE-2026-50656HIGH
Microsoft Defender Elevation of Privilege Vulnerability
46RIESGO
abrir ↗
Referência
CVE-2026-12787
CVE-2026-12787MEDIUM
zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testConnection Endpoint deserialization
33RIESGO
abrir ↗
Referência
CVE-2026-12130
CVE-2026-12130MEDIUM
CodeAstro Human Resource Management System Projects Management Add_Projects cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2018-25407
CVE-2018-25407HIGH
eNdonesia Portal 8.7 SQL Injection via mod.php
41RIESGO
abrir ↗
Referência
CVE-2018-25406
CVE-2018-25406HIGH
eNdonesia Portal 8.7 SQL Injection via mod.php
41RIESGO
abrir ↗
Referência
CVE-2026-13510
CVE-2026-13510MEDIUM
SimStudioAI sim Password Protection deployment.ts weak hash
33RIESGO
abrir ↗
← anteriorpágina 757 / 764siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.