Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-108932
CVE-2026-108932MEDIUM
Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-109571
CVE-2026-109571LOW
Fire-Boltt BSW013 firmware through V0.0.8 Unauthenticated Heart Rate Disclosure via BLE
28RIESGO
abrir ↗
Referência
CVE-2026-109570
CVE-2026-109570MEDIUM
Fire-Boltt BSW013 through V0.0.8 Unauthenticated BLE Notification Injection
33RIESGO
abrir ↗
Referência
CVE-2026-108930
CVE-2026-108930MEDIUM
Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-108928
CVE-2026-108928MEDIUM
itsourcecode Online Admission System sum.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-108927
CVE-2026-108927MEDIUM
itsourcecode Baptism Information Management System pbaptism.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-109425
CVE-2026-109425MEDIUM
Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets
33RIESGO
abrir ↗
Referência
CVE-2026-108926
CVE-2026-108926MEDIUM
itsourcecode Baptism Information Management System ebaptism.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2017-6327
CVE-2017-6327HIGHbajo ataque
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situ
83RIESGO
abrir ↗
Referência
CVE-2026-85091
CVE-2026-85091HIGH
zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate
41RIESGO
abrir ↗
Referência
CVE-2026-94003
CVE-2026-94003CRITICAL
Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2026-104084
CVE-2026-104084HIGH
SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token
41RIESGO
abrir ↗
Referência
CVE-2026-93997
CVE-2026-93997MEDIUM
SourceCodester Drug Recommendation System edit_symptom.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2017-7642
CVE-2017-7642—
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local use
23RIESGO
abrir ↗
Referência
CVE-2017-7643
CVE-2017-7643—
Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid progra
23RIESGO
abrir ↗
Referência
CVE-2026-108158
CVE-2026-108158HIGH
plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert
41RIESGO
abrir ↗
Referência
CVE-2026-104083
CVE-2026-104083MEDIUM
SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content
33RIESGO
abrir ↗
Referência
CVE-2026-104077
CVE-2026-104077HIGH
Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown
41RIESGO
abrir ↗
Referência
CVE-2026-93976
CVE-2026-93976MEDIUM
code-projects Assessment Management add-user.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-104078
CVE-2026-104078HIGH
Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter Bypass
41RIESGO
abrir ↗
Referência
CVE-2026-93972
CVE-2026-93972MEDIUM
SourceCodester Online Reviewer Management System btn_functions.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-81653
CVE-2026-81653MEDIUM
NextGEN Gallery < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion via IDOR
33RIESGO
abrir ↗
Referência
CVE-2017-8870
CVE-2017-8870—
Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file.
43RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component MiniBB 1.5a - Remote File Inclusion
CVE-2006-3690—webappsphp
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component com_videodb 0.3en - Remote File Inclusion
CVE-2006-3736—webappsphp
PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlier
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) - SQL Injection
CVE-2006-4072—webappsasp
Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VWar 1.50 R14 - 'online.php' SQL Injection
CVE-2006-4142—webappsphp
SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TinyWebGallery 1.5 - 'image' Remote File Inclusion
CVE-2006-4166—webappsphp
PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component Peoplebook 1.0 - Remote File Inclusion
CVE-2006-4195—webappsphp
PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component Security Images 3.0.5 - Remote File Inclusion
CVE-2006-5048—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier f
28RIESGO
abrir ↗
← anteriorpágina 622 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.