Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.313exploits catalogados

34.834CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8484Nuclei 4237Metasploit 3467✓ solo verificadosrecientes populares riesgo

21.692 exploits

Referência

CVE-2026-6537

CVE-2026-6537MEDIUM

Stack-based Buffer Overflow in Wireshark

33RIESGO

abrir ↗

Referência

CVE-2026-6536

CVE-2026-6536MEDIUM

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

33RIESGO

abrir ↗

Referência

CVE-2012-6526

CVE-2012-6526—

SQL injection vulnerability in show_code.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência

CVE-2012-6529

CVE-2012-6529—

Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the i

23RIESGO

abrir ↗

Referência

CVE-2026-7468

CVE-2026-7468MEDIUM

1024-lab smart-admin Demo Site index.html access control

33RIESGO

abrir ↗

Referência✓ VexDay Proof

nuseo PHP enterprise 1.6 - Remote File Inclusion

CVE-2007-5409—webappsphp

PHP remote file inclusion vulnerability in admin/nuseo_admin_d.php in NuSEO PHP Enterprise 1.6 (NuSEO.PHP), when registe

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PBEmail 7 - ActiveX Edition Insecure Method

CVE-2007-5446—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in PBEmail7Ax.dll in PBEmail 7 ActiveX Edition allows

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Softbiz Recipes Portal Script - SQL Injection

CVE-2007-5449—webappsphp

SQL injection vulnerability in searchresult.php in Softbiz Recipes Portal Script allows remote attackers to execute arbi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Apple iTouch/iPhone 1.1.1 - '.tif' Remote Privilege Escalation 'Jailbreak'

CVE-2007-5450—remoteios

Unspecified vulnerability in Safari on the Apple iPod touch (aka iTouch) and iPhone 1.1.1 allows user-assisted remote at

23RIESGO

abrir ↗

Referência

CVE-2012-6555

CVE-2012-6555—

Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to i

23RIESGO

abrir ↗

Referência✓ VexDay Proof

WWWISIS 7.1 - 'IsisScript' Local File Disclosure / Cross-Site Scripting

CVE-2007-5455—webappscgi

Cross-site scripting (XSS) vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

KwsPHP 1.0 Module Newsletter - SQL Injection

CVE-2007-5458—webappsphp

SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magic_quotes_gpc is disabled, all

23RIESGO

abrir ↗

Referência

CVE-2012-6559

CVE-2012-6559—

Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web scrip

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Apache Tomcat - 'WebDAV' Remote File Disclosure

CVE-2007-5461—remotemultiple

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.

35RIESGO

abrir ↗

Referência

CVE-2026-6981

CVE-2026-6981MEDIUM

IhateCreatingUserNames2 AiraHub2 Endpoint AiraHub.py sync_agents server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-6980

CVE-2026-6980MEDIUM

Divyanshu-hash GitPilot-MCP main.py repo_path command injection

33RIESGO

abrir ↗

Referência

CVE-2026-6979

CVE-2026-6979MEDIUM

devlikeapro WAHA API Request media.controller.ts server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-6978

CVE-2026-6978MEDIUM

JiZhiCMS addcache.html htmlspecialchars_decode sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6977

CVE-2026-6977MEDIUM

vanna-ai vanna Legacy Flask API improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-41473

CVE-2026-41473HIGH

CyberPanel < 2.4.4 Unauthenticated API Access via AI Scanner Endpoints

41RIESGO

abrir ↗

Referência

CVE-2026-41472

CVE-2026-41472MEDIUM

CyberPanel < 2.4.4 Stored XSS via AI Scanner Dashboard

33RIESGO

abrir ↗

Referência

CVE-2026-41414

CVE-2026-41414HIGH

Skim: Arbitrary code execution via pull_request_target fork checkout in pr.yml

41RIESGO

abrir ↗

Referência

CVE-2026-39920

CVE-2026-39920CRITICAL

BridgeHead FileStore < 24A Apache Axis2 Default Credentials RCE

48RIESGO

abrir ↗

Referência

CVE-2026-31635

CVE-2026-31635HIGH

rxrpc: fix oversized RESPONSE authenticator length check

41RIESGO

abrir ↗

Referência

CVE-2013-0090

CVE-2013-0090HIGH

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary co

53RIESGO

abrir ↗

Referência

CVE-2013-0135

CVE-2013-0135—

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2026-6197

CVE-2026-6197HIGH

Tenda F456 AdvSetWrlsafeset formWrlsafeset stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6168

CVE-2026-6168HIGH

TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6166

CVE-2026-6166MEDIUM

code-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-3830

CVE-2026-3830HIGH

Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.