Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.634exploits catalogados
40.286CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.110Exploit-DB 24.488GitHub PoC 17.941VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.110 exploits
Referência
CVE-2017-16962
CVE-2017-16962—
The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities vi
23RIESGO
abrir ↗
Referência
CVE-2017-16994
CVE-2017-16994—
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, w
23RIESGO
abrir ↗
Referência
CVE-2026-82554
CVE-2026-82554MEDIUM
SourceCodester Queue Management System add_customer.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-82487
CVE-2026-82487MEDIUM
Beetel 450TC3 password recovery
33RIESGO
abrir ↗
Referência
CVE-2026-82485
CVE-2026-82485MEDIUM
itsourcecode Sales and Inventory System pro_edit.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13549
CVE-2026-13549MEDIUM
CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization
33RIESGO
abrir ↗
Referência
CVE-2026-13589
CVE-2026-13589MEDIUM
seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-115303
CVE-2026-115303LOW
Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping
28RIESGO
abrir ↗
Referência
CVE-2026-13588
CVE-2026-13588MEDIUM
seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2022-1388
CVE-2022-1388CRITICALbajo ataqueransomware
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RIESGO
abrir ↗
Referência
CVE-2026-58467
CVE-2026-58467HIGH
Cockpit CMS 2.14.0 - Path Traversal Local File Inclusion via index.php
56RIESGO
abrir ↗
Referência
CVE-2026-10243
CVE-2026-10243MEDIUM
code-projects Smart Parking System Admin Endpoint missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-10123
CVE-2026-10123HIGH
TRENDnet TEW-432BRP formSetDomainFilter stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-10121
CVE-2026-10121HIGH
TRENDnet TEW-432BRP formSetUrlFilter stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2018-25422
CVE-2018-25422HIGH
MOGG web simulator Script All Version SQL Injection via play.php
41RIESGO
abrir ↗
Referência
CVE-2026-13587
CVE-2026-13587MEDIUM
seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2014-7226
CVE-2014-7226—
The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2017-17614
CVE-2017-17614—
Food Order Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-92398
CVE-2026-92398CRITICAL
Ruijie RG-EW3000GX user_list_note admin os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-92397
CVE-2026-92397CRITICAL
Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection
48RIESGO
abrir ↗
Referência
CVE-2017-6550
CVE-2017-6550—
Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow
CVE-2007-1709—localwindows
Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows contex
23RIESGO
abrir ↗
Referência
CVE-2026-115302
CVE-2026-115302MEDIUM
Contact Form by Supsystic < 1.11.1 - Unauthenticated Arbitrary Statistics Deletion
33RIESGO
abrir ↗
Referência
CVE-2017-0092
CVE-2017-0092—
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers
28RIESGO
abrir ↗
Referência
CVE-2026-115281
CVE-2026-115281MEDIUM
Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi via 'recipeId' Attribute
33RIESGO
abrir ↗
Referência
CVE-2026-115224
CVE-2026-115224MEDIUM
Smart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category Binding
33RIESGO
abrir ↗
Referência
CVE-2026-113813
CVE-2026-113813MEDIUM
PayPlug for WooCommerce 2.8.0 - 3.1.0 - Unauthenticated Arbitrary Order Deletion, Modification and Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-113494
CVE-2026-113494LOW
GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content Shortcode
28RIESGO
abrir ↗
Referência
CVE-2017-3623
CVE-2017-3623—
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported ve
28RIESGO
abrir ↗
Referência
CVE-2026-115301
CVE-2026-115301HIGH
Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block
41RIESGO
abrir ↗
← anteriorpágina 285 / 871siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.