Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.166exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.078VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência✓ VexDay Proof

Travelsized CMS 0.4 - 'FrontPage.php' Remote File Inclusion

CVE-2006-5182—webappsphp

PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote att

23RIESGO

abrir ↗

Referência

CVE-2026-78197

CVE-2026-78197MEDIUM

SourceCodester Simple Online Food Ordering System ajax.php save_user sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Ol BookMarks Manager 0.7.4 - SQL Injection

CVE-2007-2817—webappsphp

SQL injection vulnerability in read/index.php in ol'bookmarks 0.7.4 allows remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Active Web Mail 4 - Authentication Bypass

CVE-2008-5973—webappsasp

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL comman

23RIESGO

abrir ↗

Referência

CVE-2026-15320

CVE-2026-15320MEDIUM

Sipeed PicoClaw pico.go rt.ReloadConfig authorization

33RIESGO

abrir ↗

Referência

CVE-2018-25303

CVE-2018-25303HIGH

Allok Video to DVD Burner 2.6.1217 Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2019-11354

CVE-2019-11354—

The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Ori

28RIESGO

abrir ↗

Referência

CVE-2018-25302

CVE-2018-25302HIGH

Allok AVI to DVD SVCD VCD Converter 4.0.1217 Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2018-25301

CVE-2018-25301HIGH

Easy MPEG to DVD Burner 1.7.11 SEH Local Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2018-25264

CVE-2018-25264MEDIUM

TransMac 12.2 Denial of Service via License Key Field

33RIESGO

abrir ↗

Referência

CVE-2018-25263

CVE-2018-25263HIGH

Faleemi Desktop Software 1.8.2 Local Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2026-7043

CVE-2026-7043MEDIUM

GreenCMS index.php pluginAddLocal unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-7042

CVE-2026-7042MEDIUM

666ghj MiroFish REST API Endpoint __init__.py create_app missing authentication

33RIESGO

abrir ↗

Referência

CVE-2026-7041

CVE-2026-7041MEDIUM

666ghj MiroFish Werkzeug Debugger PIN console information disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-6199

CVE-2026-6199HIGH

Tenda F456 qossetting fromqossetting stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6198

CVE-2026-6198HIGH

Tenda F456 NatStaticSetting fromNatStaticSetting stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2015-7243

CVE-2015-7243—

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly

50RIESGO

abrir ↗

Referência

CVE-2026-7039

CVE-2026-7039HIGH

tufantunc ssh-mcp index.ts shell.write command injection

41RIESGO

abrir ↗

Referência

CVE-2026-7038

CVE-2026-7038MEDIUM

tufantunc ssh-mcp Command Line index.ts insufficiently protected credentials

33RIESGO

abrir ↗

Referência

CVE-2026-7037

CVE-2026-7037CRITICAL

Totolink A8000RU CGI cstecgi.cgi setVpnPassCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-7127

CVE-2026-7127MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7123

CVE-2026-7123CRITICAL

Totolink A8000RU CGI cstecgi.cgi setIptvCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-7122

CVE-2026-7122CRITICAL

Totolink A8000RU CGI cstecgi.cgi setUPnPCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-7119

CVE-2026-7119HIGH

Tenda HG3 formCountrystr os command injection

41RIESGO

abrir ↗

Referência

CVE-2026-7118

CVE-2026-7118MEDIUM

code-projects Employee Management System cancel.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7036

CVE-2026-7036MEDIUM

Tenda i9 HTTP R7WebsSecurityHandlerfunction path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-7035

CVE-2026-7035HIGH

Tenda FH1202 httpd WrlclientSet fromWrlclientSet stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-113393

CVE-2026-113393MEDIUM

DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-81660

CVE-2026-81660HIGH

Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field

41RIESGO

abrir ↗

Referência

CVE-2018-25312

CVE-2018-25312HIGH

LifeSize ClearSea 3.1.4 Directory Traversal Remote Code Execution

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.