Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2018-25291

CVE-2018-25291MEDIUM

Project64 2.3.2 Denial of Service via Plugin Directory

33RIESGO

abrir ↗

Referência

CVE-2018-25290

CVE-2018-25290MEDIUM

Easyboot 6.6.0 Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2018-25289

CVE-2018-25289MEDIUM

Softdisk 3.0.3 Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2018-25288

CVE-2018-25288MEDIUM

StyleWriter 1.0 Denial of Service via Pattern Input

33RIESGO

abrir ↗

Referência

CVE-2026-5970

CVE-2026-5970MEDIUM

FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection

33RIESGO

abrir ↗

Referência

CVE-2026-5962

CVE-2026-5962MEDIUM

Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5961

CVE-2026-5961MEDIUM

code-projects Simple IT Discussion Forum topic-details.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5960

CVE-2026-5960MEDIUM

code-projects Patient Record Management System SQL Database Backup File hcpms.sql information disclosure

33RIESGO

abrir ↗

Referência

CVE-2016-20055

CVE-2016-20055HIGH

IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2026-6005

CVE-2026-6005MEDIUM

code-projects Patient Record Management System hematology_print.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6004

CVE-2026-6004MEDIUM

code-projects Simple IT Discussion Forum delete-category.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5992

CVE-2026-5992HIGH

Tenda F451 P2pListFilter fromP2pListFilter stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-86321

CVE-2026-86321MEDIUM

java-json-tools jackson-coreutils URL Validation JsonLoader.java JsonLoader.fromURL server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2016-5425

CVE-2016-5425—

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distribu

38RIESGO

abrir ↗

Referência

CVE-2026-86665

CVE-2026-86665MEDIUM

aircheng-org iWebShop-5 update.php index authorization

33RIESGO

abrir ↗

Referência

CVE-2026-6010

CVE-2026-6010MEDIUM

CodeAstro Online Classroom takeassessment2.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6007

CVE-2026-6007MEDIUM

itsourcecode Construction Management System del.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6006

CVE-2026-6006MEDIUM

code-projects Patient Record Management System edit_hpatient.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2014-2009

CVE-2014-2009—

The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials, the installation path

23RIESGO

abrir ↗

Referência

CVE-2018-25293

CVE-2018-25293MEDIUM

Prime95 29.4b7 Denial of Service via Proxy Password Field

33RIESGO

abrir ↗

Referência

CVE-2018-25292

CVE-2018-25292MEDIUM

Bome Restorator 1793 Denial of Service via Buffer Overflow

33RIESGO

abrir ↗

Referência

CVE-2026-14783

CVE-2026-14783MEDIUM

NousResearch hermes-agent skills_tool.py skill_view path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-15675

CVE-2026-15675MEDIUM

code-projects Online Job Portal EditUser.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-67281

CVE-2026-67281HIGH

Unauthenticated file read in Mikrotik RouterOS

41RIESGO

abrir ↗

Referência

CVE-2026-12582

CVE-2026-12582HIGH

Library Management System < 3.5.8 - Unauthenticated SQL Injection via book_id

41RIESGO

abrir ↗

Referência

CVE-2014-3978

CVE-2014-3978—

SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2014-4113

CVE-2014-4113HIGHbajo ataque

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RIESGO

abrir ↗

Referência

CVE-2021-45783

CVE-2021-45783—

Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to

23RIESGO

abrir ↗

Referência

CVE-2026-5611

CVE-2026-5611HIGH

Belkin F9K1015 formCrossBandSwitch stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5610

CVE-2026-5610HIGH

Belkin F9K1015 formWISP5G stack-based overflow

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.