Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados

40.258CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientes populares riesgo

26.095 exploits

Referência

CVE-2026-8241

CVE-2026-8241MEDIUM

Industrial Application Software IAS Canias ERP RMI iasGetServerInfoEvent improper authorization

33RIESGO

abrir ↗

Referência

CVE-2015-7246

CVE-2015-7246—

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou

28RIESGO

abrir ↗

Referência

CVE-2017-17628

CVE-2017-17628—

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-8235

CVE-2026-8235MEDIUM

8421bit MiniClaw System kernel.ts resolveSkillScriptPath os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8229

CVE-2026-8229MEDIUM

Wavlink NU516U1 wireless.cgi WifiBasic os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8228

CVE-2026-8228MEDIUM

Wavlink NU516U1 wireless.cgi advance os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8227

CVE-2026-8227MEDIUM

Wavlink NU516U1 adm.cgi wzdapMesh os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8226

CVE-2026-8226MEDIUM

Open5GS types.c ogs_pcc_rule_install_flow_from_media denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8225

CVE-2026-8225MEDIUM

Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8195

CVE-2026-8195MEDIUM

JeecgBoot SVG File CommonController.java cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-8190

CVE-2026-8190MEDIUM

Wavlink NU516U1 adm.cgi wan os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8209

CVE-2026-8209MEDIUM

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction

33RIESGO

abrir ↗

Referência

CVE-2026-108612

CVE-2026-108612MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch

33RIESGO

abrir ↗

Referência

CVE-2026-75012

CVE-2026-75012HIGH

TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference

41RIESGO

abrir ↗

Referência

CVE-2026-18853

CVE-2026-18853MEDIUM

ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal

33RIESGO

abrir ↗

Referência

CVE-2017-17635

CVE-2017-17635—

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eve

23RIESGO

abrir ↗

Referência

CVE-2015-7858

CVE-2015-7858—

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un

60RIESGO

abrir ↗

Referência

CVE-2017-17636

CVE-2017-17636—

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.

23RIESGO

abrir ↗

Referência

CVE-2015-7889

CVE-2015-7889—

The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions f

23RIESGO

abrir ↗

Referência

CVE-2019-12372

CVE-2019-12372—

Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.

23RIESGO

abrir ↗

Referência

CVE-2016-2385

CVE-2016-2385—

Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER a

28RIESGO

abrir ↗

Referência

CVE-2016-3672

CVE-2016-3672—

The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize t

23RIESGO

abrir ↗

Referência

CVE-2026-74899

CVE-2026-74899CRITICAL

openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy

48RIESGO

abrir ↗

Referência

CVE-2013-7025

CVE-2013-7025—

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell So

23RIESGO

abrir ↗

Referência

CVE-2026-20000

CVE-2026-20000MEDIUM

itsourcecode Hospital Management System viewprescriptionrecord.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-75011

CVE-2026-75011MEDIUM

kylecui NetForensicMCP index.js execAsync command injection

33RIESGO

abrir ↗

Referência

CVE-2016-0094

CVE-2016-0094—

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W

23RIESGO

abrir ↗

Referência

CVE-2026-108616

CVE-2026-108616MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/deleteBatch

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Monster Top List 1.4.2 - 'functions.php?root_path' Remote File Inclusion

CVE-2006-1781—webappsphp

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers

23RIESGO

abrir ↗

Referência

WordPress Plugin UserPro 4.9.32 - Cross-Site Scripting

CVE-2019-14470—webappsphp

cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has X

60RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.