Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.302exploits catalogados
35.469CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.301 exploits
Referência
CVE-2026-5828
CVE-2026-5828MEDIUM
code-projects Simple IT Discussion Forum addcomment.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5827
CVE-2026-5827MEDIUM
code-projects Simple IT Discussion Forum question-function.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5826
CVE-2026-5826MEDIUM
code-projects Simple IT Discussion Forum edit-category.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5705
CVE-2026-5705MEDIUM
code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5691
CVE-2026-5691MEDIUM
Totolink A7100RU cstecgi.cgi setFirewallType os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5690
CVE-2026-5690MEDIUM
Totolink A7100RU cstecgi.cgi setRemoteCfg os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5689
CVE-2026-5689MEDIUM
Totolink A7100RU cstecgi.cgi setNtpCfg os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5688
CVE-2026-5688MEDIUM
Totolink A7100RU cstecgi.cgi setDdnsCfg os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5687
CVE-2026-5687HIGH
Tenda CX12L NatStaticSetting fromNatStaticSetting stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5686
CVE-2026-5686HIGH
Tenda CX12L RouteStatic fromRouteStatic stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5685
CVE-2026-5685HIGH
Tenda CX12L addressNat fromAddressNat stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5684
CVE-2026-5684HIGH
Tenda CX12L webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5683
CVE-2026-5683MEDIUM
Tenda CX12L P2pListFilter fromP2pListFilter stack-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-5682
CVE-2026-5682MEDIUM
Meesho Online Shopping App com.meesho.supply endpoint risky encryption
33RIESGO
abrir ↗
Referência
CVE-2026-5681
CVE-2026-5681MEDIUM
itsourcecode sanitize or validate this input Parameter borrowedequip.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5679
CVE-2026-5679MEDIUM
Totolink A3300R cstecgi.cgi vsetTr069Cfg os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5678
CVE-2026-5678MEDIUM
Totolink A7100RU cstecgi.cgi setScheduleCfg os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5677
CVE-2026-5677MEDIUM
Totolink A7100RU cstecgi.cgi CsteSystem os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5676
CVE-2026-5676MEDIUM
Totolink A8000R cstecgi.cgi setLanguageCfg missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-5675
CVE-2026-5675MEDIUM
itsourcecode Construction Management System Parameter borrowed_tool.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5672
CVE-2026-5672MEDIUM
code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5671
CVE-2026-5671MEDIUM
Cyber-III Student-Management-System Class Schedule Deletion Endpoint delete_batch.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5670
CVE-2026-5670MEDIUM
Cyber-III Student-Management-System upload.php move_uploaded_file unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2018-25234
CVE-2018-25234MEDIUM
SmartFTP Client 9.0.2615.0 Denial of Service via Host Field
33RIESGO
abrir ↗
Referência
CVE-2018-25233
CVE-2018-25233MEDIUM
WebDrive 18.00.5057 Denial of Service via Secure WebDAV
33RIESGO
abrir ↗
Referência
CVE-2018-25232
CVE-2018-25232MEDIUM
Softros LAN Messenger 9.2 Denial of Service via Log Files Location
33RIESGO
abrir ↗
Referência
CVE-2018-25231
CVE-2018-25231MEDIUM
HeidiSQL 9.5.0.5196 Denial of Service via Preferences
33RIESGO
abrir ↗
Referência
CVE-2018-25230
CVE-2018-25230MEDIUM
Free IP Switcher 3.1 Denial of Service via Computer Name
33RIESGO
abrir ↗
Referência
CVE-2018-25229
CVE-2018-25229MEDIUM
BulletProof FTP Server 2019.0.0.50 Denial of Service via SMTP
33RIESGO
abrir ↗
Referência
CVE-2018-25228
CVE-2018-25228MEDIUM
NetSetMan 4.7.1 Workgroup Buffer Overflow Denial of Service
33RIESGO
abrir ↗
← anteriorpágina 446 / 744siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.