Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados
34.679CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.692 exploits
Referência
CVE-2026-5988
CVE-2026-5988HIGH
Tenda F451 AdvSetWrlsafeset formWrlsafeset stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5987
CVE-2026-5987MEDIUM
Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine
33RIESGO
abrir ↗
Referência
CVE-2026-5986
CVE-2026-5986MEDIUM
Zod jsVideoUrlParser util.js getTime redos
33RIESGO
abrir ↗
Referência
CVE-2026-5985
CVE-2026-5985MEDIUM
code-projects Simple IT Discussion Forum crud.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
phpEventCalendar 0.2.3 - 'eventdisplay.php' SQL Injection
CVE-2007-3519—webappsphp
SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2026-5585
CVE-2026-5585MEDIUM
Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-5584
CVE-2026-5584MEDIUM
Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection
33RIESGO
abrir ↗
Referência
CVE-2026-5583
CVE-2026-5583MEDIUM
PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5580
CVE-2026-5580MEDIUM
CodeAstro Online Classroom Parameter addvideos.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5579
CVE-2026-5579MEDIUM
CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5578
CVE-2026-5578MEDIUM
CodeAstro Online Classroom Parameter addassessment.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5577
CVE-2026-5577MEDIUM
Song-Li cross_browser details Endpoint uniquemachine_app.py sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5576
CVE-2026-5576MEDIUM
SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-5575
CVE-2026-5575MEDIUM
SourceCodester/jkev Record Management System Login index.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
JW Player - 'playerready' Cross-Site Scripting
CVE-2012-3351—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers
23RIESGO
abrir ↗
Referência
CVE-2026-5984
CVE-2026-5984HIGH
D-Link DIR-605L POST Request formSetLog buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5983
CVE-2026-5983HIGH
D-Link DIR-605L POST Request formSetDDNS buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5982
CVE-2026-5982HIGH
D-Link DIR-605L POST Request formAdvNetwork buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5453
CVE-2026-5453MEDIUM
Rico só vantagem pra investir App br.com.rico.mobile SegmentSettingsModule.java hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5452
CVE-2026-5452MEDIUM
UCC CampusConnect App campusconnect.ucc BuildConfig.java hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5420
CVE-2026-5420LOW
Shinrays Games Goods Triple App cats.goods.sort.sorting.games jRwTX.java hard-coded key
28RIESGO
abrir ↗
Referência
CVE-2026-5417
CVE-2026-5417MEDIUM
Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-5414
CVE-2026-5414MEDIUM
Newgen OmniDocs WebApiRequestRedirection resource injection
33RIESGO
abrir ↗
Referência
CVE-2026-5413
CVE-2026-5413MEDIUM
Newgen OmniDocs GetWebApiConfiguration information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-5370
CVE-2026-5370MEDIUM
krayin laravel-crm Activities Module/Notes inbox.spec.ts composeMail cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5368
CVE-2026-5368MEDIUM
projectworlds Car Rental Project Parameter login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5360
CVE-2026-5360MEDIUM
Free5GC aper type confusion
33RIESGO
abrir ↗
Referência
CVE-2026-5355
CVE-2026-5355MEDIUM
Trendnet TEW-657BRM setup.cgi vpn_drop os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5354
CVE-2026-5354MEDIUM
Trendnet TEW-657BRM setup.cgi vpn_connect os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5353
CVE-2026-5353MEDIUM
Trendnet TEW-657BRM setup.cgi ping_test os command injection
33RIESGO
abrir ↗
← anteriorpágina 288 / 724siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.