Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.526exploits catalogados
34.478CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8213Nuclei 4218Metasploit 3464✓ solo verificadosrecientespopularesriesgo
21.534 exploits
Referência
CVE-2026-6621
CVE-2026-6621MEDIUM
1024bit extend-deep index.js prototype pollution
33RIESGO
abrir ↗
Referência
CVE-2010-5026
CVE-2010-5026—
SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
exV2 < 2.0.4.3 - 'extract()' Remote Command Execution
CVE-2006-7080—webappsphp
Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to de
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PhpNews 1.0 - 'Include' Remote File Inclusion
CVE-2006-7081—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code v
23RIESGO
abrir ↗
Referência
CVE-2026-6799
CVE-2026-6799MEDIUM
Comfast CF-N1-S Endpoint mbox-config command injection
33RIESGO
abrir ↗
Referência
CVE-2026-6745
CVE-2026-6745MEDIUM
Bagisto Custom Scripts cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-41456
CVE-2026-41456MEDIUM
Bludit CMS Reflected XSS via Search Plugin
33RIESGO
abrir ↗
Referência
CVE-2026-6744
CVE-2026-6744MEDIUM
Bagisto Downloadable Link copy server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-6743
CVE-2026-6743MEDIUM
WebSystems WebTOTUM Calendar cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2019-25714
CVE-2019-25714CRITICAL
Seeyon Office Anywhere (OA) A8 Unauthenticated Arbitrary File Write via htmlofficeservlet
48RIESGO
abrir ↗
Referência
CVE-2019-25714
CVE-2019-25714CRITICAL
Seeyon Office Anywhere (OA) A8 Unauthenticated Arbitrary File Write via htmlofficeservlet
48RIESGO
abrir ↗
Referência
CVE-2026-6662
CVE-2026-6662MEDIUM
ericc-ch copilot-api Token Endpoint server.ts cors cross-domain policy
33RIESGO
abrir ↗
Referência
CVE-2026-6652
CVE-2026-6652MEDIUM
Pagekit CMS StringStorage Template PhpEngine.php evaluate eval injection
33RIESGO
abrir ↗
Referência
CVE-2026-6651
CVE-2026-6651MEDIUM
erponline.xyz ERP Online Inventory Edit Item cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6650
CVE-2026-6650MEDIUM
Z-BlogPHP ZBA File app_upload.php UnPack unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-34429
CVE-2026-34429MEDIUM
Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename
33RIESGO
abrir ↗
Referência
CVE-2026-6649
CVE-2026-6649MEDIUM
Qibo CMS headers server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-6648
CVE-2026-6648MEDIUM
Qibo CMS Internal Message cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6636
CVE-2026-6636MEDIUM
p2r3 convert API buildCache.js Bun.serve path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-6635
CVE-2026-6635MEDIUM
rowboatlabs rowboat tools_webhook app.py tool_call improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-6634
CVE-2026-6634MEDIUM
usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-6633
CVE-2026-6633MEDIUM
Yifang CMS Extended Management L_rbac_admin.php store cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6632
CVE-2026-6632HIGH
Tenda F451 httpd SafeClientFilter fromSafeClientFilter buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-6631
CVE-2026-6631HIGH
Tenda F451 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-6630
CVE-2026-6630HIGH
Tenda F451 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-6629
CVE-2026-6629MEDIUM
Metasoft 美特软件 MetaCRM Interface sql.jsp Statement.executeUpdate sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6628
CVE-2026-6628MEDIUM
phili67 Ecclesia CRM Query Viewer view ValidateInput sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6626
CVE-2026-6626MEDIUM
Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection
33RIESGO
abrir ↗
Referência
CVE-2026-6625
CVE-2026-6625MEDIUM
moxi624 Mogu Blog v2 Picture Storage Service LocalFileServiceImpl.java LocalFileServiceImpl.uploadPictureByUrl server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-6624
CVE-2026-6624MEDIUM
BichitroGan ISP Billing Software Pool List add cross site scripting
33RIESGO
abrir ↗
← anteriorpágina 190 / 718siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.