Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.302exploits catalogados
35.469CVEs con explotación pública
24.695probados en laboratorio
22.266 exploits
Referência
CVE-2026-5607
imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery
33RIESGO
abrir
Referência
CVE-2019-25692
Kados R10 GreenBee SQL Injection via id_to_modify Parameter
41RIESGO
abrir
Referência
CVE-2019-25690
Kados R10 GreenBee SQL Injection via mng_profile_id
41RIESGO
abrir
Referência
CVE-2019-25688
Kados R10 GreenBee SQL Injection via menu_lev1 Parameter
41RIESGO
abrir
Referência
CVE-2019-25686
Core FTP 2.0 build 653 PBSZ Unauthenticated Denial of Service
41RIESGO
abrir
Referência
CVE-2019-25684
OpenDocMan 1.3.4 SQL Injection via where Parameter
41RIESGO
abrir
Referência
CVE-2019-25683
FileZilla 3.40.0 Denial of Service via Local Search
33RIESGO
abrir
Referência
CVE-2019-25682
CMSsite 1.0 Cross-Site Request Forgery via users.php
33RIESGO
abrir
Referência
CVE-2019-25681
Xlight FTP Server 3.9.1 SEH Overwrite Buffer Overflow
41RIESGO
abrir
Referência
CVE-2019-25680
Advance Gift Shop Pro Script 2.0.3 SQL Injection via search
41RIESGO
abrir
Referência
CVE-2019-25679
RealTerm Serial Terminal 2.0.0.70 Buffer Overflow SEH
41RIESGO
abrir
Referência
CVE-2019-25678
C4G BLIS 3.4 SQL Injection via users_select.php
41RIESGO
abrir
Referência
CVE-2019-25677
WinRAR 5.61 Denial of Service via Malformed Language File
33RIESGO
abrir
Referência
CVE-2019-25674
CMSsite 1.0 SQL Injection via post Parameter
41RIESGO
abrir
Referência
CVE-2019-25673
UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload
41RIESGO
abrir
Referência
CVE-2019-25672
PilusCart 1.4.1 SQL Injection via send Parameter
41RIESGO
abrir
Referência
CVE-2019-25671
VA MAX 8.3.4 Remote Code Execution via changeip.php
41RIESGO
abrir
Referência
CVE-2019-25669
qdPM 9.1 SQL Injection via search_by_extrafields Parameter
41RIESGO
abrir
Referência
CVE-2019-25668
News Website Script 2.0.5 SQL Injection via index.php
41RIESGO
abrir
Referência
CVE-2019-25667
TaskInfo 8.2.0.280 Denial of Service Buffer Overflow
33RIESGO
abrir
Referência
CVE-2019-25666
SpotAuditor 3.6.7 Denial of Service Buffer Overflow
33RIESGO
abrir
Referência
CVE-2019-25665
River Past Ringtone Converter 2.7.6.1601 Buffer Overflow DoS
33RIESGO
abrir
Referência
CVE-2019-25664
SuiteCRM 7.10.7 SQL Injection via record Parameter
41RIESGO
abrir
Referência
CVE-2019-25663
SuiteCRM 7.10.7 SQL Injection via parentTab Parameter
41RIESGO
abrir
Referência
CVE-2019-25662
ResourceSpace 8.6 SQL Injection via watched_searches.php
41RIESGO
abrir
Referência
CVE-2019-25661
Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS
33RIESGO
abrir
Referência
CVE-2019-25660
LanHelper 1.74 Denial of Service via Buffer Overflow
33RIESGO
abrir
Referência
CVE-2019-25659
ASPRunner Professional 6.0.766 Local Buffer Overflow DoS
33RIESGO
abrir
Referência
CVE-2019-25658
a-Mac Address Change 5.4 Local Buffer Overflow DoS
33RIESGO
abrir
Referência
CVE-2019-25657
AnyBurn 4.3 x86 Denial of Service via Image Conversion
33RIESGO
abrir
anteriorpágina 435 / 743siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.