Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2026-10160

CVE-2026-10160HIGH

TRENDnet TEW-432BRP formSetEnableWizard stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-11406

CVE-2026-11406MEDIUM

GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection

33RIESGO

abrir ↗

Referência

CVE-2019-25727

CVE-2019-25727CRITICAL

WordPress Plugin ad manager wd 1.0.11 Arbitrary File Download

48RIESGO

abrir ↗

Referência

CVE-2015-8427

CVE-2015-8427—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RIESGO

abrir ↗

Referência

CVE-2026-10159

CVE-2026-10159HIGH

TRENDnet TEW-432BRP formSysLog stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2019-25726

CVE-2019-25726HIGH

All in One Video Downloader 1.2 SQL Injection via admin page-edit

41RIESGO

abrir ↗

Referência

CVE-2026-18790

CVE-2026-18790MEDIUM

Systerel S2OPC DeleteMonitoredItemsRequest state_machine.c out-of-bounds

33RIESGO

abrir ↗

Referência

CVE-2014-2575

CVE-2014-2575—

Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebFor

23RIESGO

abrir ↗

Referência

CVE-2014-2575

CVE-2014-2575—

Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebFor

23RIESGO

abrir ↗

Referência

CVE-2026-10158

CVE-2026-10158HIGH

TRENDnet TEW-432BRP formPortFw stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-15471

CVE-2026-15471MEDIUM

Eleveo Call Recording Software pci_dss_status.jsp improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-15470

CVE-2026-15470MEDIUM

Eleveo Call Recording Software group.jsp improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-10810

CVE-2026-10810MEDIUM

itsourcecode Fees Management System navbar.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-47123

CVE-2026-47123HIGH

FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path

41RIESGO

abrir ↗

Referência

CVE-2026-15547

CVE-2026-15547MEDIUM

Shibby Tomato CIFS Mount sub_2D048 os command injection

33RIESGO

abrir ↗

Referência

CVE-2025-5640

CVE-2025-5640MEDIUM

PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-7716

CVE-2026-7716MEDIUM

code-projects Gym Management System In PHP/Windows NT index.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7070

CVE-2026-7070MEDIUM

code-projects Inventory Management System Login sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7069

CVE-2026-7069HIGH

D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-7071

CVE-2026-7071MEDIUM

CodeAstro Online Job Portal user-cvs file information disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-29008

CVE-2026-29008HIGH

U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()

41RIESGO

abrir ↗

Referência

CVE-2019-6116

CVE-2019-6116—

In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to

35RIESGO

abrir ↗

Referência

CVE-2014-3138

CVE-2014-3138—

SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1

23RIESGO

abrir ↗

Referência

CVE-2016-1103

CVE-2016-1103—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RIESGO

abrir ↗

Referência

CVE-2026-58144

CVE-2026-58144MEDIUM

Cotonti Siena 0.9.26 Stored XSS via PFS Module ntitle Parameter

33RIESGO

abrir ↗

Referência

CVE-2016-1103

CVE-2016-1103—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RIESGO

abrir ↗

Referência

CVE-2026-111151

CVE-2026-111151MEDIUM

OpenJPH through 0.32.0 Heap Out-of-Bounds Write in HTJ2K Cleanup-Pass Decoder

33RIESGO

abrir ↗

Referência

CVE-2016-1106

CVE-2016-1106—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RIESGO

abrir ↗

Referência

CVE-2016-1542

CVE-2016-1542—

The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and U

60RIESGO

abrir ↗

Referência

CVE-2026-13543

CVE-2026-13543MEDIUM

Documenso Google OAuth Login handle-oauth-callback-url.ts improper authentication

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.