Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados
40.392CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.190 exploits
Referência
CVE-2014-10023
CVE-2014-10023—
Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2026-31431
CVE-2026-31431HIGHbajo ataque
crypto: algif_aead - Revert to operating out-of-place
100RIESGO
abrir ↗
Referência
CVE-2009-4809
CVE-2009-4809—
Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2018-12525
CVE-2018-12525—
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /images/ pr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component 'com_awesom' 0.3.2 - 'listid' SQL Injection
CVE-2008-0603—webappsphp
SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allows
23RIESGO
abrir ↗
Referência
CVE-2018-12584
CVE-2018-12584—
The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows rem
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Google Chrome 0.2.149.27 - Denial of Service
CVE-2008-6995—doswindows
Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a den
23RIESGO
abrir ↗
Referência
CVE-2026-58658
CVE-2026-58658HIGH
GPUStack Unauthenticated Information Disclosure via Worker Endpoints
41RIESGO
abrir ↗
Referência
CVE-2010-4502
CVE-2010-4502—
Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of
23RIESGO
abrir ↗
Referência
CVE-2026-86666
CVE-2026-86666MEDIUM
aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-7750
CVE-2026-7750HIGH
Totolink N300RH POST Request cstecgi.cgi setMacFilterRules buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7749
CVE-2026-7749HIGH
Totolink N300RH POST Request cstecgi.cgi setWanConfig buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7748
CVE-2026-7748HIGH
Totolink N300RH POST Request cstecgi.cgi setUpgradeFW buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7747
CVE-2026-7747CRITICAL
Totolink N300RH Parameter cstecgi.cgi loginauth buffer overflow
48RIESGO
abrir ↗
Referência
CVE-2012-1260
CVE-2012-1260—
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An
23RIESGO
abrir ↗
Referência
CVE-2014-10038
CVE-2014-10038—
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2026-7676
CVE-2026-7676MEDIUM
kerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-40500
CVE-2026-40500—
3RIESGO
abrir ↗
Referência
CVE-2026-14845
CVE-2026-14845MEDIUM
NewStatPress < 1.4.5 - Unauthenticated Stored XSS via Top Post Widget
33RIESGO
abrir ↗
Referência
CVE-2026-14221
CVE-2026-14221LOW
Easy Appointments <= 4.0 - Contributor+ Appointment Data Disclosure & Modification via Missing Authorization
28RIESGO
abrir ↗
Referência
CVE-2025-65133
CVE-2025-65133CRITICAL
A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580. An unauthenticated
48RIESGO
abrir ↗
Referência
CVE-2026-38533
CVE-2026-38533MEDIUM
An improper authorization vulnerability in the /api/v1/users/{id} endpoint of Snipe-IT v8.4.0 allows authenticated attac
33RIESGO
abrir ↗
Referência
CVE-2026-7675
CVE-2026-7675HIGH
Shenzhen Libituo Technology LBT-T300-HW1 apply.cgi start_lan buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-66753
CVE-2026-66753MEDIUM
tiny-http 0.12.0 HTTP Response Splitting via Header Injection
33RIESGO
abrir ↗
Referência
CVE-2026-7673
CVE-2026-7673MEDIUM
crmeb_java Admin Upload UploadServiceImpl.java unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-7644
CVE-2026-7644MEDIUM
ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-39907
CVE-2026-39907HIGH
Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP
41RIESGO
abrir ↗
Referência
CVE-2026-39906
CVE-2026-39906HIGH
Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting
41RIESGO
abrir ↗
Referência
CVE-2026-39808
CVE-2026-39808CRITICALbajo ataque
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F
100RIESGO
abrir ↗
Referência
CVE-2026-7643
CVE-2026-7643MEDIUM
ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy
33RIESGO
abrir ↗
← anteriorpágina 300 / 873siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.