Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados

40.392CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.190 exploits

Referência

CVE-2026-6036

CVE-2026-6036MEDIUM

code-projects Vehicle Showroom Management System VehicleDetailsFunction.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6035

CVE-2026-6035MEDIUM

code-projects Vehicle Showroom Management System ServiceAndSalesReport.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-6034

CVE-2026-6034MEDIUM

code-projects Vehicle Showroom Management System ProfitAndLossReport.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-6033

CVE-2026-6033MEDIUM

CodeAstro Online Classroom updatedetailsfromstudent.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6032

CVE-2026-6032MEDIUM

code-projects Simple Laundry System checkcheckout.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-6031

CVE-2026-6031MEDIUM

code-projects Simple IT Discussion Forum add-category-function.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6030

CVE-2026-6030MEDIUM

itsourcecode Construction Management System del1.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6029

CVE-2026-6029CRITICAL

Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-6026

CVE-2026-6026CRITICAL

Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-6025

CVE-2026-6025CRITICAL

Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-6024

CVE-2026-6024MEDIUM

Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-6016

CVE-2026-6016HIGH

Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6015

CVE-2026-6015HIGH

Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2012-1464

CVE-2012-1464—

Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via a

23RIESGO

abrir ↗

Referência

CVE-2012-1495

CVE-2012-1495—

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user

60RIESGO

abrir ↗

Referência✓ VexDay Proof

WebCalendar 1.2.4 - Remote Code Execution

CVE-2012-1495—webappsphp

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user

60RIESGO

abrir ↗

Referência

CVE-2018-25291

CVE-2018-25291MEDIUM

Project64 2.3.2 Denial of Service via Plugin Directory

33RIESGO

abrir ↗

Referência

CVE-2018-25290

CVE-2018-25290MEDIUM

Easyboot 6.6.0 Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2018-25289

CVE-2018-25289MEDIUM

Softdisk 3.0.3 Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2018-25288

CVE-2018-25288MEDIUM

StyleWriter 1.0 Denial of Service via Pattern Input

33RIESGO

abrir ↗

Referência

CVE-2026-5970

CVE-2026-5970MEDIUM

FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection

33RIESGO

abrir ↗

Referência

CVE-2026-5962

CVE-2026-5962MEDIUM

Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5961

CVE-2026-5961MEDIUM

code-projects Simple IT Discussion Forum topic-details.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5960

CVE-2026-5960MEDIUM

code-projects Patient Record Management System SQL Database Backup File hcpms.sql information disclosure

33RIESGO

abrir ↗

Referência

CVE-2016-20055

CVE-2016-20055HIGH

IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2026-6005

CVE-2026-6005MEDIUM

code-projects Patient Record Management System hematology_print.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6004

CVE-2026-6004MEDIUM

code-projects Simple IT Discussion Forum delete-category.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5992

CVE-2026-5992HIGH

Tenda F451 P2pListFilter fromP2pListFilter stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2016-5425

CVE-2016-5425—

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distribu

38RIESGO

abrir ↗

Referência

CVE-2026-67281

CVE-2026-67281HIGH

Unauthenticated file read in Mikrotik RouterOS

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.