Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.989exploits catalogados

40.450CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.042VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.240 exploits

Referência

CVE-2026-5568

CVE-2026-5568MEDIUM

Akaunting Invoice/Billing cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5567

CVE-2026-5567HIGH

Tenda M3 Destination setAdvPolicyData buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5566

CVE-2026-5566HIGH

UTT HiPER 1250GW formNatStaticMap strcpy buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5565

CVE-2026-5565MEDIUM

code-projects Simple Laundry System Parameter delmemberinfo.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-108620

CVE-2026-108620MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /sys/position/deleteBatch

33RIESGO

abrir ↗

Referência

CVE-2026-108618

CVE-2026-108618MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit Endpoint

33RIESGO

abrir ↗

Referência✓ VexDay Proof

CKGold Shopping Cart 2.5 - 'category_id' SQL Injection

CVE-2008-2774—webappsphp

SQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows remote attackers to execut

23RIESGO

abrir ↗

Referência

CVE-2024-14037

CVE-2024-14037CRITICAL

Redsea Cloud eHR Unauthenticated File Upload RCE via PtFjk.mob

48RIESGO

abrir ↗

Referência

CVE-2014-4936

CVE-2014-4936—

The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE)

43RIESGO

abrir ↗

Referência✓ VexDay Proof

shibby shop 2.2 - Multiple Vulnerabilities

CVE-2008-2882—webappsphp

upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers

23RIESGO

abrir ↗

Referência

CVE-2013-1763

CVE-2013-1763—

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l

23RIESGO

abrir ↗

Referência

CVE-2026-11490

CVE-2026-11490MEDIUM

code-projects Online Music Site Search.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10293

CVE-2026-10293HIGH

UTT HiPER 1200GW formFireWall strcpy stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-34108

CVE-2026-34108CRITICAL

Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text.php

48RIESGO

abrir ↗

Referência✓ VexDay Proof

aeDating 4.1 - dir[inc] Remote File Inclusion

CVE-2006-4870—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attacker

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component EXP Shop - 'catid' SQL Injection

CVE-2008-2892—webappsphp

SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute a

23RIESGO

abrir ↗

Referência

CVE-2026-82921

CVE-2026-82921MEDIUM

ShopEx ECShop pack.php check_img_type unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2024-0737

CVE-2024-0737MEDIUM

Xlightftpd Xlight FTP Server Login denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-82545

CVE-2026-82545MEDIUM

itsourcecode Sales and Inventory System sup_searchfrm.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-82541

CVE-2026-82541MEDIUM

itsourcecode Sales and Inventory System sup_edit.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-34107

CVE-2026-34107CRITICAL

Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate.php

48RIESGO

abrir ↗

Referência

CVE-2011-0512

CVE-2011-0512—

SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to exec

23RIESGO

abrir ↗

Referência

CVE-2012-2275

CVE-2012-2275—

Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijac

23RIESGO

abrir ↗

Referência

CVE-2026-19715

CVE-2026-19715HIGH

WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log File

41RIESGO

abrir ↗

Referência✓ VexDay Proof

Dana IRC 1.3 - Remote Buffer Overflow (PoC)

CVE-2008-2922—doswindows

Stack-based buffer overflow in artegic Dana IRC client 1.3 and earlier allows remote attackers to cause a denial of serv

23RIESGO

abrir ↗

Referência

CVE-2026-9584

CVE-2026-9584MEDIUM

code-projects Project Management System Login chk.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-106099

CVE-2026-106099MEDIUM

WP Data Access < 5.5.84 - Unauthenticated Sensitive Data Disclosure via Table Export

33RIESGO

abrir ↗

Referência

CVE-2026-105975

CVE-2026-105975MEDIUM

CamPay Shortcode Payment Gateway < 1.7 - Unauthenticated Payment Status Forgery via external_reference

33RIESGO

abrir ↗

Referência

CVE-2026-103307

CVE-2026-103307HIGH

Walletdoc Payment Gateway for WooCommerce < 1.8.5 - Unauthenticated SQLi and Order Payment Forgery via Webhook

41RIESGO

abrir ↗

Referência

CVE-2018-7756

CVE-2018-7756—

RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP

35RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.