Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2026-15537
CVE-2026-15537MEDIUM
SourceCodester Online Book Store System login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-15536
CVE-2026-15536MEDIUM
itsourcecode Hospital Management System patviewprescription.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-82608
CVE-2026-82608MEDIUM
Kamailio AVP cxdx_avp.c get_4bytes out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-82601
CVE-2026-82601MEDIUM
SeaCMS err.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-86178
CVE-2026-86178MEDIUM
Pixelfed through 0.12.9 Unauthorized Story Access via API
33RIESGO
abrir ↗
Referência
CVE-2026-18991
CVE-2026-18991MEDIUM
nanocoai NanoClaw send_file core.ts path traversal
33RIESGO
abrir ↗
Referência
CVE-2019-1937
CVE-2019-1937CRITICAL
Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability
85RIESGO
abrir ↗
Referência
CVE-2026-70620
CVE-2026-70620MEDIUM
Odysseus SSRF via Embedding Endpoint Configuration
33RIESGO
abrir ↗
Referência
CVE-2026-59509
CVE-2026-59509CRITICAL
Unauthenticated arbitrary MongoDB collection read in cve-search
63RIESGO
abrir ↗
Referência
CVE-2019-19509
CVE-2019-19509—
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a
60RIESGO
abrir ↗
Referência
CVE-2020-11698
CVE-2020-11698—
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp
60RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component Sitemap 2.0.0 - Remote File Inclusion
CVE-2006-3749—webappsphp
PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com_sitemap) 2.0.0 for Mambo 4.5.1 CMS,
23RIESGO
abrir ↗
Referência
CVE-2026-18814
CVE-2026-18814HIGH
H3C NX15 esps reload.reload_config command injection
41RIESGO
abrir ↗
Referência
CVE-2026-86281
CVE-2026-86281MEDIUM
SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-67279
CVE-2026-67279MEDIUMbajo ataque
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
63RIESGO
abrir ↗
Referência
PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting
CVE-2020-11749—webappsphp
Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator
28RIESGO
abrir ↗
Referência
CVE-2026-101263
CVE-2026-101263CRITICAL
Ziroom ZHOME A0101 set_online_client command injection
48RIESGO
abrir ↗
Referência
CVE-2026-101143
CVE-2026-101143MEDIUM
Eleveo Quality Management QMBODownload information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-101142
CVE-2026-101142MEDIUM
Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-10232
CVE-2026-10232MEDIUM
Assimp ASE File scene.cpp ~aiNode use after free
33RIESGO
abrir ↗
Referência
CVE-2026-10231
CVE-2026-10231MEDIUM
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-10229
CVE-2026-10229MEDIUM
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-10228
CVE-2026-10228MEDIUM
raisulislamg4 student_management_system_by_php admission_form_check.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-10227
CVE-2026-10227MEDIUM
raisulislamg4 student_management_system_by_php User Creation add_user_check.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2021-40381
CVE-2021-40381—
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. index_MJpeg.cgi allows
28RIESGO
abrir ↗
Referência✓ VexDay Proof
MyBloggie 2.1.4 - 'trackback.php' Multiple SQL Injections
CVE-2006-4042—webappsphp
Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers
23RIESGO
abrir ↗
Referência
CVE-2021-40382
CVE-2021-40382—
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. mjpegStreamer.cgi allo
28RIESGO
abrir ↗
Referência
CVE-2026-12492
CVE-2026-12492CRITICAL
Happy Coders OTP Login for WooCommerce < 2.8 - Unauthenticated Account Takeover via hcotp_auto_login_user
48RIESGO
abrir ↗
Referência
CVE-2026-15470
CVE-2026-15470MEDIUM
Eleveo Call Recording Software group.jsp improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-15752
CVE-2026-15752MEDIUM
zhinianboke xianyu-auto-reply Backend User Endpoint users authorization
33RIESGO
abrir ↗
← anteriorpágina 361 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.