Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.240 exploits

Referência

CVE-2023-54363

CVE-2023-54363MEDIUM

Joomla Solidres 2.13.3 Reflected XSS via Multiple Parameters

33RIESGO

abrir ↗

Referência

CVE-2023-54362

CVE-2023-54362MEDIUM

Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword

33RIESGO

abrir ↗

Referência

CVE-2023-54361

CVE-2023-54361MEDIUM

Joomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keyword

33RIESGO

abrir ↗

Referência

CVE-2018-25318

CVE-2018-25318CRITICAL

Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change

48RIESGO

abrir ↗

Referência

CVE-2018-25317

CVE-2018-25317CRITICAL

Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change

48RIESGO

abrir ↗

Referência

CVE-2018-25316

CVE-2018-25316CRITICAL

Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change

48RIESGO

abrir ↗

Referência

CVE-2018-25315

CVE-2018-25315HIGH

Alloksoft Video joiner 4.6.1217 Buffer Overflow via License Name

41RIESGO

abrir ↗

Referência

CVE-2018-25314

CVE-2018-25314HIGH

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2018-25313

CVE-2018-25313MEDIUM

SysGauge 4.5.18 Local Denial of Service via Proxy Configuration

33RIESGO

abrir ↗

Referência

CVE-2018-25304

CVE-2018-25304HIGH

Free Download Manager 2.0 Build 417 Local Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2026-6014

CVE-2026-6014HIGH

D-Link DIR-513 POST Request formAdvanceSetup buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6013

CVE-2026-6013HIGH

D-Link DIR-513 POST Request formSetRoute buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6012

CVE-2026-6012HIGH

D-Link DIR-513 POST Request formSetPassword buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6011

CVE-2026-6011MEDIUM

OpenClaw assertPublicHostname web-fetch.ts server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2015-1058

CVE-2015-1058—

Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web scr

23RIESGO

abrir ↗

Referência

CVE-2026-5659

CVE-2026-5659MEDIUM

pytries datrie trie File datrie.pyx Trie.__setstate__ deserialization

33RIESGO

abrir ↗

Referência

CVE-2026-5650

CVE-2026-5650MEDIUM

code-projects Online Application System for Admission oas.sql sensitive information

33RIESGO

abrir ↗

Referência

CVE-2026-5649

CVE-2026-5649MEDIUM

code-projects Online Application System for Admission Endpoint admsnform.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5648

CVE-2026-5648MEDIUM

code-projects Simple Laundry System Parameter userfinishregister.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5647

CVE-2026-5647MEDIUM

code-projects Online Shoe Store Add Product admin_feature.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5646

CVE-2026-5646MEDIUM

code-projects Easy Blog Site login.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5645

CVE-2026-5645MEDIUM

projectworlds Car Rental System Parameter pay.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5644

CVE-2026-5644MEDIUM

Cyber-III Student-Management-System batch-notice.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5643

CVE-2026-5643MEDIUM

Cyber-III Student-Management-System Admin Add Endpoint notice.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-14733

CVE-2026-14733MEDIUM

SourceCodester Class and Exam Timetabling System edit_coursea.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-66749

CVE-2026-66749HIGH

Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup

41RIESGO

abrir ↗

Referência

CVE-2026-5642

CVE-2026-5642MEDIUM

Cyber-III Student-Management-System HTTP POST Request update.php improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-5641

CVE-2026-5641MEDIUM

PHPGurukul Online Shopping Portal Project Parameter update-image1.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5640

CVE-2026-5640MEDIUM

PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5639

CVE-2026-5639MEDIUM

PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.