Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados

40.258CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientes populares riesgo

26.095 exploits

Referência

CVE-2025-0186

CVE-2025-0186MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RIESGO

abrir ↗

Referência

CVE-2025-3922

CVE-2025-3922MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RIESGO

abrir ↗

Referência

CVE-2025-6016

CVE-2025-6016MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-5377

CVE-2026-5377MEDIUM

Incorrect Authorization in GitLab

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Easy-Clanpage 2.2 - 'id' SQL Injection

CVE-2008-1425—webappsphp

SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute a

23RIESGO

abrir ↗

Referência

CVE-2026-6493

CVE-2026-6493MEDIUM

lukevella rallly Reset Password reset-password-form.tsx cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2025-9957

CVE-2025-9957LOW

Incorrect Authorization in GitLab

28RIESGO

abrir ↗

Referência

CVE-2026-1660

CVE-2026-1660MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-5262

CVE-2026-5262HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

41RIESGO

abrir ↗

Referência

CVE-2026-5816

CVE-2026-5816HIGH

Improper Resolution of Path Equivalence in GitLab

41RIESGO

abrir ↗

Referência

CVE-2025-65135

CVE-2025-65135CRITICAL

In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin

48RIESGO

abrir ↗

Referência

CVE-2026-6201

CVE-2026-6201MEDIUM

CodeAstro Online Job Portal Delete Job Posting job-delete.php access control

33RIESGO

abrir ↗

Referência

CVE-2026-6200

CVE-2026-6200HIGH

Tenda F456 webtypelibrary formwebtypelibrary stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-40043

CVE-2026-40043HIGH

Pachno 1.0.6 Authentication Bypass via runSwitchUser()

41RIESGO

abrir ↗

Referência

CVE-2022-32429

CVE-2022-32429—

An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technolog

60RIESGO

abrir ↗

Referência✓ VexDay Proof

Danneo CMS 0.5.1 - Blind SQL Injection

CVE-2008-1513—webappsphp

SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enabled

23RIESGO

abrir ↗

Referência

CVE-2014-4511

CVE-2014-4511—

Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in

60RIESGO

abrir ↗

Referência

CVE-2015-1028

CVE-2015-1028—

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remo

23RIESGO

abrir ↗

Referência

CVE-2016-8811

CVE-2016-8811—

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

23RIESGO

abrir ↗

Referência

CVE-2022-38580

CVE-2022-38580CRITICAL

Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).

53RIESGO

abrir ↗

Referência

CVE-2011-5277

CVE-2011-5277—

Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka afsignatures) plugin 2.0.4

23RIESGO

abrir ↗

Referência✓ VexDay Proof

GrapAgenda 0.1 - 'page' Remote File Inclusion

CVE-2006-4610—webappsphp

PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when register_globals is enabled, a

23RIESGO

abrir ↗

Referência

CVE-2026-5854

CVE-2026-5854CRITICAL

Totolink A7100RU CGI cstecgi.cgi setWiFiEasyCfg os command injection

53RIESGO

abrir ↗

Referência

CVE-2026-5853

CVE-2026-5853CRITICAL

Totolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injection

53RIESGO

abrir ↗

Referência

CVE-2026-5852

CVE-2026-5852CRITICAL

Totolink A7100RU CGI cstecgi.cgi setIptvCfg os command injection

53RIESGO

abrir ↗

Referência

CVE-2026-5851

CVE-2026-5851CRITICAL

Totolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injection

53RIESGO

abrir ↗

Referência

CVE-2026-5850

CVE-2026-5850CRITICAL

Totolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injection

53RIESGO

abrir ↗

Referência

CVE-2026-5849

CVE-2026-5849MEDIUM

Tenda i12 HTTP path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5848

CVE-2026-5848MEDIUM

jeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injection

33RIESGO

abrir ↗

Referência

CVE-2026-23696

CVE-2026-23696CRITICAL

Windmill < 1.603.3 File Ownership Handling SQLi RCE

68RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.