Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2026-41950
CVE-2026-41950MEDIUM
Dify < 1.14.0 Authorization Bypass via File UUID
33RIESGO
abrir ↗
Referência
CVE-2026-41950
CVE-2026-41950MEDIUM
Dify < 1.14.0 Authorization Bypass via File UUID
33RIESGO
abrir ↗
Referência
CVE-2026-7857
CVE-2026-7857HIGH
D-Link DI-8100 CGI user_group.asp sprintf buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7856
CVE-2026-7856HIGH
D-Link DI-8100 Web Management url_member.asp buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7855
CVE-2026-7855HIGH
D-Link DI-8100 HTTP Request tggl.asp tggl_asp buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-6115
CVE-2026-6115CRITICAL
Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2025-9484
CVE-2025-9484MEDIUM
Missing Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-1092
CVE-2026-1092HIGH
Improper Validation of Specified Quantity in Input in GitLab
41RIESGO
abrir ↗
Referência
CVE-2026-1101
CVE-2026-1101MEDIUM
Improper Validation of Specified Quantity in Input in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-1516
CVE-2026-1516MEDIUM
Improper Control of Generation of Code ('Code Injection') in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-1752
CVE-2026-1752MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-2104
CVE-2026-2104MEDIUM
Authorization Bypass Through User-Controlled Key in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-5543
CVE-2026-5543MEDIUM
PHPGurukul User Registration & Login and User Management System yesterday-reg-users.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5542
CVE-2026-5542MEDIUM
code-projects Simple Laundry System Parameter modstaffinfo.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5557
CVE-2026-5557MEDIUM
badlogic pi-mono pi-mom Slack Bot slack.ts authentication bypass
33RIESGO
abrir ↗
Referência
CVE-2026-5556
CVE-2026-5556MEDIUM
badlogic pi-mono loader.ts discoverAndLoadExtensions code injection
33RIESGO
abrir ↗
Referência
CVE-2026-5555
CVE-2026-5555MEDIUM
code-projects Concert Ticket Reservation System Parameter login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5554
CVE-2026-5554MEDIUM
code-projects Concert Ticket Reservation System Parameter process_search.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5553
CVE-2026-5553MEDIUM
itsourcecode Online Cellphone System Parameter available.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5541
CVE-2026-5541MEDIUM
code-projects Simple Laundry System Parameter modmemberinfo.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5552
CVE-2026-5552MEDIUM
PHPGurukul Online Shopping Portal Project Parameter sub-category.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5551
CVE-2026-5551MEDIUM
itsourcecode Free Hotel Reservation System Parameter login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5549
CVE-2026-5549MEDIUM
Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5546
CVE-2026-5546MEDIUM
Campcodes Complete Online Learning Management System Crud_model.php add_lesson unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-5544
CVE-2026-5544HIGH
UTT HiPER 1250GW formRemoteControl stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5540
CVE-2026-5540MEDIUM
code-projects Simple Laundry System Parameter modifymember.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5539
CVE-2026-5539MEDIUM
code-projects Simple Laundry System Parameter modifymember.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5537
CVE-2026-5537MEDIUM
halex CourseSEL HTTP GET Parameter IndexController.class.php check_sel sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5535
CVE-2026-5535MEDIUM
FedML-AI FedML MQTT Message FileUtils.java path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-5532
CVE-2026-5532MEDIUM
ScrapeGraphAI scrapegraph-ai GenerateCodeNode generate_code_node.py create_sandbox_and_execute os command injection
33RIESGO
abrir ↗
← anteriorpágina 477 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.