Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.966exploits catalogados

40.449CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.032VulnCheck XDB 10.108Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.240 exploits

Referência

CVE-2026-5333

CVE-2026-5333MEDIUM

DefaultFuction Content-Management-System tools.php command injection

33RIESGO

abrir ↗

Referência

CVE-2026-5332

CVE-2026-5332MEDIUM

Xiaopi Panel WAF Firewall demo.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-2699

CVE-2026-2699CRITICAL

EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

75RIESGO

abrir ↗

Referência

CVE-2026-5331

CVE-2026-5331MEDIUM

OpenCart Extension Installer installer.php path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5453

CVE-2026-5453MEDIUM

Rico só vantagem pra investir App br.com.rico.mobile SegmentSettingsModule.java hard-coded key

33RIESGO

abrir ↗

Referência

CVE-2012-4927

CVE-2012-4927—

SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attack

23RIESGO

abrir ↗

Referência

CVE-2017-20227

CVE-2017-20227CRITICAL

JAD 1.5.8e-1kali1 Stack-Based Buffer Overflow

48RIESGO

abrir ↗

Referência

CVE-2017-20226

CVE-2017-20226HIGH

Mapscrn 2.0.3 Stack-Based Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2017-20225

CVE-2017-20225CRITICAL

TiEmu 2.08 Stack-Based Buffer Overflow Vulnerability

48RIESGO

abrir ↗

Referência

CVE-2016-20049

CVE-2016-20049CRITICAL

JAD 1.5.8e-1kali1 Stack-Based Buffer Overflow Remote Code Execution

48RIESGO

abrir ↗

Referência

CVE-2016-20048

CVE-2016-20048HIGH

iSelect 1.4.0-2+b1 Local Buffer Overflow via key parameter

41RIESGO

abrir ↗

Referência

CVE-2016-20047

CVE-2016-20047HIGH

EKG Gadu 1.9 Local Buffer Overflow via Username Parameter

41RIESGO

abrir ↗

Referência

CVE-2016-20046

CVE-2016-20046HIGH

zFTP Client 20061220+dfsg3-4.1 Local Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2016-20045

CVE-2016-20045HIGH

HNB Organizer 1.9.18-10 Local Buffer Overflow via -rc Parameter

41RIESGO

abrir ↗

Referência

CVE-2016-20044

CVE-2016-20044HIGH

PInfo 0.6.9-5.1 Local Buffer Overflow via -m Parameter

41RIESGO

abrir ↗

Referência

CVE-2016-20043

CVE-2016-20043HIGH

NRSS RSS Reader 0.3.9-1 Stack Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2016-20042

CVE-2016-20042HIGH

TRN 3.6-23 Stack Buffer Overflow Local Code Execution

41RIESGO

abrir ↗

Referência

CVE-2016-20041

CVE-2016-20041HIGH

Yasr 0.6.9-5 Buffer Overflow via Command-line Parameter

41RIESGO

abrir ↗

Referência

CVE-2016-20040

CVE-2016-20040HIGH

TiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter

41RIESGO

abrir ↗

Referência

CVE-2016-20039

CVE-2016-20039HIGH

Multi Emulator Super System 0.154-3.1 Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2016-20038

CVE-2016-20038HIGH

yTree 1.94-1.1 Stack-Based Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2016-20037

CVE-2016-20037HIGH

xwpe 1.5.30a-2.1 Stack-based Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2026-4996

CVE-2026-4996MEDIUM

Sinaptik AI PandasAI pandasai-lancedb Extension lancedb.py get_relevant_docs_by_id sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-4995

CVE-2026-4995MEDIUM

wandb OpenUI Window Message Event index.html cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-4994

CVE-2026-4994MEDIUM

wandb OpenUI APIStatusError server.py generic_exception_handler information exposure

33RIESGO

abrir ↗

Referência

CVE-2026-4993

CVE-2026-4993MEDIUM

wandb OpenUI config.py hard-coded credentials

33RIESGO

abrir ↗

Referência

CVE-2025-15445

CVE-2025-15445MEDIUM

Restaurant Cafeteria <= 0.4.6 - Subscriber+ Arbitrary Plugin Installation/Activation

33RIESGO

abrir ↗

Referência

CVE-2015-3000

CVE-2015-3000—

SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a lar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FaScript FaPhoto 1.0 - 'show.php' SQL Injection

CVE-2008-1714—webappsphp

SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attack

23RIESGO

abrir ↗

Referência

CVE-2026-9709

CVE-2026-9709HIGH

Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.