Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.240 exploits

Referência

CVE-2023-54358

CVE-2023-54358MEDIUM

WordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobile

33RIESGO

abrir ↗

Referência

CVE-2026-5979

CVE-2026-5979HIGH

D-Link DIR-605L POST Request formVirtualServ buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5977

CVE-2026-5977CRITICAL

Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-5976

CVE-2026-5976CRITICAL

Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-5975

CVE-2026-5975CRITICAL

Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-5973

CVE-2026-5973MEDIUM

FoundationAgents MetaGPT common.py get_mime_type os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-5972

CVE-2026-5972MEDIUM

FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-39912

CVE-2026-39912CRITICAL

v2board / Xboard Authentication Token Exposure via loginWithMailLink

48RIESGO

abrir ↗

Referência

CVE-2026-5971

CVE-2026-5971MEDIUM

FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection

33RIESGO

abrir ↗

Referência

CVE-2026-5847

CVE-2026-5847MEDIUM

code-projects Movie Ticketing System SQL Database Backup File moviedb.sql information disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-5844

CVE-2026-5844HIGH

D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection

41RIESGO

abrir ↗

Referência

CVE-2026-5842

CVE-2026-5842MEDIUM

decolua 9router Administrative API Endpoint api authorization

33RIESGO

abrir ↗

Referência

CVE-2026-5841

CVE-2026-5841MEDIUM

Tenda i3 HTTP R7WebsSecurityHandler path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5840

CVE-2026-5840MEDIUM

PHPGurukul News Portal Project check_availability.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5839

CVE-2026-5839MEDIUM

PHPGurukul News Portal Project add-subcategory.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5838

CVE-2026-5838MEDIUM

PHPGurukul News Portal Project add-subadmins.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5837

CVE-2026-5837MEDIUM

PHPGurukul News Portal Project news-details.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5836

CVE-2026-5836MEDIUM

code-projects Online Shoe Store admin_product.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2018-6585

CVE-2018-6585—

SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filter_creator or fi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BrowserCRM 5.002.00 - 'clients.php' Remote File Inclusion

CVE-2008-2689—webappsphp

PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arb

35RIESGO

abrir ↗

Referência

CVE-2026-5835

CVE-2026-5835MEDIUM

code-projects Online Shoe Store admin_football.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5834

CVE-2026-5834MEDIUM

code-projects Online Shoe Store admin_running.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5833

CVE-2026-5833MEDIUM

awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injection

33RIESGO

abrir ↗

Referência

CVE-2023-54360

CVE-2023-54360MEDIUM

Joomla JLex Review 6.0.1 Reflected XSS via review_id Parameter

33RIESGO

abrir ↗

Referência

CVE-2023-54359

CVE-2023-54359HIGH

WordPress adivaha Travel Plugin 2.3 SQL Injection via pid

41RIESGO

abrir ↗

Referência✓ VexDay Proof

JAMM CMS - 'id' Blind SQL Injection

CVE-2008-2755—webappsphp

SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the i

23RIESGO

abrir ↗

Referência

CVE-2026-104671

CVE-2026-104671MEDIUM

TutorStarter < 4.0.4 - Unauthenticated User Registration Bypass via AJAX

33RIESGO

abrir ↗

Referência

CVE-2026-5574

CVE-2026-5574MEDIUM

Technostrobe HI-LED-WR120-G2 FsBrowseClean deletefile authorization

33RIESGO

abrir ↗

Referência

CVE-2026-5573

CVE-2026-5573MEDIUM

Technostrobe HI-LED-WR120-G2 fs unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-5572

CVE-2026-5572MEDIUM

Technostrobe HI-LED-WR120-G2 cross-site request forgery

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.