Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.302exploits catalogados

35.469CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.266 exploits

Referência

CVE-2018-10830

CVE-2018-10830—

In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of serv

23RIESGO

abrir ↗

Referência

CVE-2018-10933

CVE-2018-10933CRITICAL

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RIESGO

abrir ↗

Referência

CVE-2026-4992

CVE-2026-4992MEDIUM

wandb OpenUI HTMLAnnotator server.py get_share HTML injection

33RIESGO

abrir ↗

Referência

CVE-2026-4988

CVE-2026-4988MEDIUM

Open5GS CCA Message smf_s6b denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-4976

CVE-2026-4976HIGH

Totolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-4975

CVE-2026-4975HIGH

Tenda AC15 POST Request setcfm formSetCfm memory corruption

41RIESGO

abrir ↗

Referência

CVE-2026-4974

CVE-2026-4974HIGH

Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption

41RIESGO

abrir ↗

Referência

CVE-2010-5021

CVE-2010-5021—

SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2010-5021

CVE-2010-5021—

SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2010-5022

CVE-2010-5022—

SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote at

23RIESGO

abrir ↗

Referência

CVE-2010-5023

CVE-2010-5023—

SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2010-5023

CVE-2010-5023—

SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2018-1122

CVE-2018-1122HIGH

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset

41RIESGO

abrir ↗

Referência

CVE-2026-14695

CVE-2026-14695MEDIUM

SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14694

CVE-2026-14694MEDIUM

SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14693

CVE-2026-14693MEDIUM

SourceCodester Multi-Vendor Online Grocery Management System Master.php cancel_order improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-9302

CVE-2026-9302MEDIUM

546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection

33RIESGO

abrir ↗

Referência

CVE-2026-9301

CVE-2026-9301MEDIUM

omec-project amf NGReset Message memory corruption

33RIESGO

abrir ↗

Referência

CVE-2026-9300

CVE-2026-9300MEDIUM

omec-project amf NGSetupRequest memory corruption

33RIESGO

abrir ↗

Referência

CVE-2010-5024

CVE-2010-5024—

SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, wi

23RIESGO

abrir ↗

Referência

CVE-2010-5026

CVE-2010-5026—

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2010-5026

CVE-2010-5026—

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2018-11502

CVE-2018-11502—

An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display t

23RIESGO

abrir ↗

Referência

CVE-2018-11510

CVE-2018-11510—

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/

35RIESGO

abrir ↗

Referência

CVE-2018-11510

CVE-2018-11510—

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/

35RIESGO

abrir ↗

Referência

CVE-2018-11510

CVE-2018-11510—

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/

35RIESGO

abrir ↗

Referência

CVE-2018-12465

CVE-2018-12465CRITICAL

Remote Code Execution in Micro Focus Secure Messaging Gateway

85RIESGO

abrir ↗

Referência

CVE-2026-6063

CVE-2026-6063MEDIUM

Authorization Bypass Through User-Controlled Key in GitLab

33RIESGO

abrir ↗

Referência

CVE-2010-5043

CVE-2010-5043—

SQL injection vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote authentica

23RIESGO

abrir ↗

Referência

CVE-2007-1297

CVE-2007-1297—

SQL injection vulnerability in view_profile.php in AJDating 1.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.