Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.949exploits catalogados
40.798CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.342VulnCheck XDB 10.507Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-19771
CVE-2026-19771HIGH
Baicells EG3661M LuCI Web luci os command injection
41RIESGO
abrir ↗
Referência
CVE-2026-5613
CVE-2026-5613HIGH
Belkin F9K1015 formReboot stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5612
CVE-2026-5612HIGH
Belkin F9K1015 formWlEncrypt stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5669
CVE-2026-5669MEDIUM
Cyber-III Student-Management-System Parameter login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5637
CVE-2026-5637MEDIUM
projectworlds Car Rental System Parameter message_admin.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5636
CVE-2026-5636MEDIUM
PHPGurukul Online Shopping Portal Project Parameter cancelorder.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5635
CVE-2026-5635MEDIUM
PHPGurukul Online Shopping Portal Project Parameter categorywise-products.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2009-4469
CVE-2009-4469—
Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2026-4332
CVE-2026-4332MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-4916
CVE-2026-4916LOW
Missing Authorization in GitLab
28RIESGO
abrir ↗
Referência
CVE-2009-4597
CVE-2009-4597—
Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote authenticated users to execute
23RIESGO
abrir ↗
Referência
CVE-2016-5195
CVE-2016-5195HIGHbajo ataque
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗
Referência
CVE-2009-4601
CVE-2009-4601—
Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2009-4617
CVE-2009-4617—
Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
KML share 1.1 - 'region.php?layer' Remote File Disclosure
CVE-2007-6212—webappsphp
Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a .
23RIESGO
abrir ↗
Referência
CVE-2012-1029
CVE-2012-1029—
SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2026-16632
CVE-2026-16632MEDIUM
boazsegev facil.io WebSocket Frame websocket_parser.h websocket_on_protocol_error input validation
33RIESGO
abrir ↗
Referência
CVE-2016-5195
CVE-2016-5195HIGHbajo ataque
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗
Referência
CVE-2026-7121
CVE-2026-7121CRITICAL
Totolink A8000RU CGI cstecgi.cgi setWizardCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2016-5195
CVE-2016-5195HIGHbajo ataque
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗
Referência
CVE-2018-10709
CVE-2018-10709—
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RIESGO
abrir ↗
Referência
CVE-2026-6878
CVE-2026-6878MEDIUM
ByteDance verl grader.py math_equal sandbox
33RIESGO
abrir ↗
Referência
CVE-2026-6874
CVE-2026-6874MEDIUM
ericc-ch copilot-api Header token dns rebinding
33RIESGO
abrir ↗
Referência
CVE-2026-30368
CVE-2026-30368MEDIUM
A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to i
33RIESGO
abrir ↗
Referência
CVE-2026-26210
CVE-2026-26210CRITICAL
KTransformers Unsafe Deserialization RCE via balance_serve
48RIESGO
abrir ↗
Referência✓ VexDay Proof
Absolute Banner Manager - Insecure Cookie Handling
CVE-2008-6858—webappsphp
Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by sett
23RIESGO
abrir ↗
Referência
CVE-2026-6942
CVE-2026-6942CRITICAL
radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass
28RIESGO
abrir ↗
Referência
CVE-2026-6941
CVE-2026-6941MEDIUM
radare2 < 6.1.4 Project Notes Path Traversal via Symlink
13RIESGO
abrir ↗
Referência
CVE-2026-6940
CVE-2026-6940MEDIUM
radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion
13RIESGO
abrir ↗
Referência
CVE-2026-40517
CVE-2026-40517HIGH
radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names
41RIESGO
abrir ↗
← anteriorpágina 783 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.