Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2018-25297
CVE-2018-25297MEDIUM
Wansview 1.0.2 Denial of Service via Buffer Overflow
33RIESGO
abrir ↗
Referência
CVE-2018-25296
CVE-2018-25296MEDIUM
P10 Central Management Software 1.4.13 Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2018-25295
CVE-2018-25295MEDIUM
ObserverIP Scan Tool 1.4.0.1 Denial of Service via IP Field
33RIESGO
abrir ↗
Referência
CVE-2018-25294
CVE-2018-25294HIGH
CEWE Photoshow 6.3.4 Buffer Overflow Denial of Service
41RIESGO
abrir ↗
Referência
CVE-2026-9677
CVE-2026-9677MEDIUM
Shariff for WordPress <= 1.0.11 - Admin+ Stored Cross-Site Scripting
33RIESGO
abrir ↗
Referência
CVE-2026-19957
CVE-2026-19957MEDIUM
graphlit graphlit-mcp-server ssrf-test Endpoint tools.ts fetch server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-19838
CVE-2026-19838MEDIUM
Webkul Bagisto Backend Reporting Endpoint sales authorization
33RIESGO
abrir ↗
Referência
CVE-2026-19965
CVE-2026-19965MEDIUM
automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy
33RIESGO
abrir ↗
Referência
CVE-2026-34103
CVE-2026-34103HIGH
Guardian Language-System SQL Injection via id Parameter in subtitles.php
41RIESGO
abrir ↗
Referência
CVE-2026-58126
CVE-2026-58126CRITICAL
PACSgear PACS Scan 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service
48RIESGO
abrir ↗
Referência
CVE-2026-14629
CVE-2026-14629MEDIUM
RT-Thread Parameter lwp_syscall.c sys_ioctl divide by zero
33RIESGO
abrir ↗
Referência
CVE-2026-19714
CVE-2026-19714CRITICAL
Simple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation
48RIESGO
abrir ↗
Referência
CVE-2026-19825
CVE-2026-19825MEDIUM
SourceCodester Simple Client Management System Master.php save_service sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14628
CVE-2026-14628MEDIUM
NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-19929
CVE-2026-19929MEDIUM
OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Linux Kernel 2.6.21.1 - IPv6 Jumbo Bug Remote Denial of Service
CVE-2008-0352—doslinux
The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6
28RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-RESIDENCE 0.7.2 - 'Search' SQL Injection
CVE-2008-0353—webappsphp
SQL injection vulnerability in visualizza_tabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2026-6593
CVE-2026-6593MEDIUM
ComfyUI View Endpoint server.py cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2013-7409
CVE-2013-7409—
Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib
50RIESGO
abrir ↗
Referência
CVE-2017-6086
CVE-2017-6086—
Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.1
23RIESGO
abrir ↗
Referência
CVE-2018-10259
CVE-2018-10259—
An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged u
23RIESGO
abrir ↗
Referência
CVE-2016-4655
CVE-2016-4655MEDIUMbajo ataque
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
90RIESGO
abrir ↗
Referência
CVE-2026-7746
CVE-2026-7746MEDIUM
SourceCodester Web-based Pharmacy Product Management System edit-admin.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-19824
CVE-2026-19824HIGH
Tenda W20E addIpMacBind ipMacBindListStore stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2017-7310
CVE-2017-7310—
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9
50RIESGO
abrir ↗
Referência
CVE-2026-10182
CVE-2026-10182MEDIUM
TRENDnet TEW-432BRP formWlanSetup command injection
33RIESGO
abrir ↗
Referência
CVE-2026-10156
CVE-2026-10156MEDIUM
Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption
33RIESGO
abrir ↗
Referência
CVE-2026-9439
CVE-2026-9439MEDIUM
Edimax BR-6675nD stainfo command injection
33RIESGO
abrir ↗
Referência
CVE-2026-9438
CVE-2026-9438MEDIUM
yashpokharna2555 StudentManagementSystem courseDel.php resource injection
33RIESGO
abrir ↗
Referência
CVE-2026-66729
CVE-2026-66729HIGH
facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser
41RIESGO
abrir ↗
← anteriorpágina 463 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.