Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados

40.392CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.190 exploits

Referência

CVE-2018-25280

CVE-2018-25280MEDIUM

Infiltrator Network Security Scanner 4.6 Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2018-25279

CVE-2018-25279MEDIUM

jiNa OCR Image to Text 1.0 Denial of Service via PNG

33RIESGO

abrir ↗

Referência

CVE-2018-25278

CVE-2018-25278MEDIUM

PicaJet FX 2.6.5 Denial of Service via Registration Fields

33RIESGO

abrir ↗

Referência

CVE-2026-5806

CVE-2026-5806MEDIUM

code-projects Easy Blog Site update.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5805

CVE-2026-5805MEDIUM

code-projects Easy Blog Site contact_us.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5803

CVE-2026-5803MEDIUM

bigsk1 openai-realtime-ui API Proxy Endpoint server.js server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2010-0723

CVE-2010-0723—

SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência

CVE-2014-3978

CVE-2014-3978—

SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2014-4113

CVE-2014-4113HIGHbajo ataque

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RIESGO

abrir ↗

Referência

CVE-2021-45783

CVE-2021-45783—

Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to

23RIESGO

abrir ↗

Referência

CVE-2026-5611

CVE-2026-5611HIGH

Belkin F9K1015 formCrossBandSwitch stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5610

CVE-2026-5610HIGH

Belkin F9K1015 formWISP5G stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5609

CVE-2026-5609HIGH

Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5608

CVE-2026-5608HIGH

Belkin F9K1122 formWlanSetup stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5607

CVE-2026-5607MEDIUM

imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2019-25692

CVE-2019-25692HIGH

Kados R10 GreenBee SQL Injection via id_to_modify Parameter

41RIESGO

abrir ↗

Referência

CVE-2019-25690

CVE-2019-25690HIGH

Kados R10 GreenBee SQL Injection via mng_profile_id

41RIESGO

abrir ↗

Referência

CVE-2019-25688

CVE-2019-25688HIGH

Kados R10 GreenBee SQL Injection via menu_lev1 Parameter

41RIESGO

abrir ↗

Referência

CVE-2019-25686

CVE-2019-25686HIGH

Core FTP 2.0 build 653 PBSZ Unauthenticated Denial of Service

41RIESGO

abrir ↗

Referência

CVE-2019-25684

CVE-2019-25684HIGH

OpenDocMan 1.3.4 SQL Injection via where Parameter

41RIESGO

abrir ↗

Referência

CVE-2019-25683

CVE-2019-25683MEDIUM

FileZilla 3.40.0 Denial of Service via Local Search

33RIESGO

abrir ↗

Referência

CVE-2019-25682

CVE-2019-25682MEDIUM

CMSsite 1.0 Cross-Site Request Forgery via users.php

33RIESGO

abrir ↗

Referência

CVE-2019-25681

CVE-2019-25681HIGH

Xlight FTP Server 3.9.1 SEH Overwrite Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2019-25680

CVE-2019-25680HIGH

Advance Gift Shop Pro Script 2.0.3 SQL Injection via search

41RIESGO

abrir ↗

Referência

CVE-2019-25679

CVE-2019-25679HIGH

RealTerm Serial Terminal 2.0.0.70 Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2019-25678

CVE-2019-25678HIGH

C4G BLIS 3.4 SQL Injection via users_select.php

41RIESGO

abrir ↗

Referência

CVE-2019-25677

CVE-2019-25677MEDIUM

WinRAR 5.61 Denial of Service via Malformed Language File

33RIESGO

abrir ↗

Referência

CVE-2019-25674

CVE-2019-25674HIGH

CMSsite 1.0 SQL Injection via post Parameter

41RIESGO

abrir ↗

Referência

CVE-2019-25673

CVE-2019-25673HIGH

UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload

41RIESGO

abrir ↗

Referência

CVE-2019-25672

CVE-2019-25672HIGH

PilusCart 1.4.1 SQL Injection via send Parameter

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.