Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.240 exploits

Referência

CVE-2026-7407

CVE-2026-7407MEDIUM

SourceCodester Pizzafy Ecommerce System Setting ajax.php save_settings sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7404

CVE-2026-7404MEDIUM

getsimpletool mcpo-simple-server base_manager.py delete_shared_prompt path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-6182

CVE-2026-6182MEDIUM

code-projects Simple Content Management System login.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6204

CVE-2026-6204HIGH

LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Bina

41RIESGO

abrir ↗

Referência

CVE-2026-2728

CVE-2026-2728MEDIUM

LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig pa

33RIESGO

abrir ↗

Referência

CVE-2025-15632

CVE-2025-15632MEDIUM

1Panel-dev MaxKB MdPreview chat.ts cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-6167

CVE-2026-6167MEDIUM

code-projects Faculty Management System subject-print.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2022-34668

CVE-2022-34668CRITICAL

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage ma

53RIESGO

abrir ↗

Referência

CVE-2024-58344

CVE-2024-58344MEDIUM

Carbon Forum 5.9.0 Persistent XSS via Forum Name Field

33RIESGO

abrir ↗

Referência

CVE-2018-25272

CVE-2018-25272CRITICAL

ELBA5 5.8.0 Remote Code Execution via Database Access

48RIESGO

abrir ↗

Referência

CVE-2018-25271

CVE-2018-25271MEDIUM

Textpad 8.1.2 Denial of Service via Run Command

33RIESGO

abrir ↗

Referência

CVE-2018-25270

CVE-2018-25270CRITICAL

ThinkPHP 5.0.23 Remote Code Execution via invokefunction

48RIESGO

abrir ↗

Referência

CVE-2018-25269

CVE-2018-25269MEDIUM

ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection

33RIESGO

abrir ↗

Referência

CVE-2018-25268

CVE-2018-25268HIGH

LanSpy 2.0.1.159 Local Buffer Overflow via Scan Field

41RIESGO

abrir ↗

Referência

CVE-2018-25267

CVE-2018-25267MEDIUM

UltraISO 9.7.1.3519 Buffer Overflow via Output FileName

33RIESGO

abrir ↗

Referência

CVE-2018-25266

CVE-2018-25266MEDIUM

Angry IP Scanner 3.5.3 Denial of Service via Preferences Buffer Overflow

33RIESGO

abrir ↗

Referência

CVE-2018-25265

CVE-2018-25265HIGH

LanSpy 2.0.1.159 Local Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2026-7403

CVE-2026-7403MEDIUM

geldata gel-mcp server.py fetch_rule path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-34965

CVE-2026-34965HIGH

Cockpit CMS Authenticated Remote Code Execution via Collections

41RIESGO

abrir ↗

Referência

CVE-2018-25311

CVE-2018-25311HIGH

VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal

41RIESGO

abrir ↗

Referência

CVE-2018-25310

CVE-2018-25310MEDIUM

VideoFlow Digital Video Protection DVP 2.10 - Authenticated Remote Code Execution

33RIESGO

abrir ↗

Referência

CVE-2018-5755

CVE-2018-5755—

Absolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite before 7.6.3-rev3, 7.8.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Cuteflow Bin 1.5.0 - 'login.php' Local File Inclusion

CVE-2008-1493—webappsphp

Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbi

23RIESGO

abrir ↗

Referência

CVE-2016-8806

CVE-2016-8806—

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload

CVE-2008-1496—webappsphp

Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência

CVE-2011-5267

CVE-2011-5267—

Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as

23RIESGO

abrir ↗

Referência

CVE-2026-82304

CVE-2026-82304HIGH

Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler

41RIESGO

abrir ↗

Referência

CVE-2026-6003

CVE-2026-6003MEDIUM

code-projects Simple IT Discussion Forum user.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5999

CVE-2026-5999MEDIUM

JeecgBoot SysAnnouncementController improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-5981

CVE-2026-5981HIGH

D-Link DIR-605L POST Request formAdvFirewall buffer overflow

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.