Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
22.721 exploits
Referência
CVE-2026-6491
CVE-2026-6491MEDIUM
libvips nip2 vips7compat.c im_minpos_vec heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-6490
CVE-2026-6490MEDIUM
QueryMine sms GET Request Parameter deletecourse.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6489
CVE-2026-6489MEDIUM
QueryMine sms Background Management addteacher.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-6488
CVE-2026-6488MEDIUM
QueryMine sms GET Request Parameter editcourse.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6487
CVE-2026-6487MEDIUM
Qihui jtbc5 CMS Code Endpoint manage.php path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-6486
CVE-2026-6486MEDIUM
classroombookings User Display Name layout.php read cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6483
CVE-2026-6483HIGH
Wavlink WL-WN530H4 internet.cgi snprintf os command injection
46RIESGO
abrir ↗
Referência
CVE-2026-6148
CVE-2026-6148MEDIUM
code-projects Vehicle Showroom Management System MonthTotalReportUpdateFunction.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6140
CVE-2026-6140CRITICAL
Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6139
CVE-2026-6139CRITICAL
Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6138
CVE-2026-6138CRITICAL
Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6129
CVE-2026-6129MEDIUM
zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication
33RIESGO
abrir ↗
Referência
CVE-2019-25712
CVE-2019-25712MEDIUM
BlueAuditor 1.7.2.0 Buffer Overflow Denial of Service via Registration Key
33RIESGO
abrir ↗
Referência
CVE-2019-25711
CVE-2019-25711MEDIUM
SpotFTP Password Recover 2.4.2 Denial of Service via Name Field
33RIESGO
abrir ↗
Referência
CVE-2019-25710
CVE-2019-25710HIGH
Dolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25709
CVE-2019-25709CRITICAL
CF Image Hosting Script 1.6.5 Unauthorized Database Access
48RIESGO
abrir ↗
Referência
CVE-2019-25708
CVE-2019-25708MEDIUM
Heatmiser Wifi Thermostat 1.7 Cross-Site Request Forgery
33RIESGO
abrir ↗
Referência
CVE-2019-25705
CVE-2019-25705HIGH
Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field
41RIESGO
abrir ↗
Referência
CVE-2019-25703
CVE-2019-25703HIGH
ImpressCMS 1.3.11 SQL Injection via bid Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25701
CVE-2019-25701HIGH
Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH
41RIESGO
abrir ↗
Referência
CVE-2019-25697
CVE-2019-25697HIGH
CMSsite 1.0 SQL Injection via category.php
41RIESGO
abrir ↗
Referência
CVE-2019-25695
CVE-2019-25695HIGH
R 3.4.4 Local Buffer Overflow Windows XP SP3
41RIESGO
abrir ↗
Referência
CVE-2019-25693
CVE-2019-25693HIGH
ResourceSpace 8.6 SQL Injection via collection_edit.php
41RIESGO
abrir ↗
Referência
CVE-2019-25691
CVE-2019-25691HIGH
Faleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass
41RIESGO
abrir ↗
Referência
CVE-2019-25689
CVE-2019-25689HIGH
HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH
41RIESGO
abrir ↗
Referência
CVE-2018-25258
CVE-2018-25258HIGH
RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass
41RIESGO
abrir ↗
Referência
CVE-2018-25257
CVE-2018-25257HIGH
Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile
41RIESGO
abrir ↗
Referência
CVE-2017-20239
CVE-2017-20239MEDIUM
MDwiki Cross-Site Scripting via Location Hash Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-6126
CVE-2026-6126MEDIUM
zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication
33RIESGO
abrir ↗
Referência
CVE-2010-4794
CVE-2010-4794—
Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and
23RIESGO
abrir ↗
← anteriorpágina 4 / 758siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.