Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.990exploits catalogados

40.451CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.043VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.240 exploits

Referência

CVE-2026-6014

CVE-2026-6014HIGH

D-Link DIR-513 POST Request formAdvanceSetup buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6013

CVE-2026-6013HIGH

D-Link DIR-513 POST Request formSetRoute buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6012

CVE-2026-6012HIGH

D-Link DIR-513 POST Request formSetPassword buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6011

CVE-2026-6011MEDIUM

OpenClaw assertPublicHostname web-fetch.ts server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2018-18419

CVE-2018-18419—

Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filen

23RIESGO

abrir ↗

Referência

CVE-2022-41333

CVE-2022-41333MEDIUM

An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below

33RIESGO

abrir ↗

Referência✓ VexDay Proof

TFTP Server 1.4 - ST Buffer Overflow

CVE-2008-1611—remotewindows

Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or ex

50RIESGO

abrir ↗

Referência

CVE-2026-10152

CVE-2026-10152MEDIUM

TaleLin lin-cms-spring-boot book Endpoint BookController.java access control

33RIESGO

abrir ↗

Referência

CVE-2018-5983

CVE-2018-5983—

SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request.

23RIESGO

abrir ↗

Referência

CVE-2026-6000

CVE-2026-6000MEDIUM

code-projects Online Library Management System SQL Database Backup File library.sql information disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-5998

CVE-2026-5998MEDIUM

zhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5997

CVE-2026-5997CRITICAL

Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-5994

CVE-2026-5994CRITICAL

Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-5993

CVE-2026-5993CRITICAL

Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-5991

CVE-2026-5991HIGH

Tenda F451 WrlExtraSet formWrlExtraSet stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5990

CVE-2026-5990HIGH

Tenda F451 SafeEmailFilter fromSafeEmailFilter stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5989

CVE-2026-5989HIGH

Tenda F451 RouteStatic fromRouteStatic stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5988

CVE-2026-5988HIGH

Tenda F451 AdvSetWrlsafeset formWrlsafeset stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5987

CVE-2026-5987MEDIUM

Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine

33RIESGO

abrir ↗

Referência

CVE-2026-5986

CVE-2026-5986MEDIUM

Zod jsVideoUrlParser util.js getTime redos

33RIESGO

abrir ↗

Referência

CVE-2026-5985

CVE-2026-5985MEDIUM

code-projects Simple IT Discussion Forum crud.php sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Neat weblog 0.2 - 'articleId' SQL Injection

CVE-2008-1639—webappsphp

SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência

CVE-2026-5585

CVE-2026-5585MEDIUM

Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-5584

CVE-2026-5584MEDIUM

Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection

33RIESGO

abrir ↗

Referência

CVE-2026-5583

CVE-2026-5583MEDIUM

PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5580

CVE-2026-5580MEDIUM

CodeAstro Online Classroom Parameter addvideos.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5579

CVE-2026-5579MEDIUM

CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5578

CVE-2026-5578MEDIUM

CodeAstro Online Classroom Parameter addassessment.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5577

CVE-2026-5577MEDIUM

Song-Li cross_browser details Endpoint uniquemachine_app.py sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5576

CVE-2026-5576MEDIUM

SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.