Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.054exploits catalogados

40.803CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.349VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2026-7535

CVE-2026-7535MEDIUM

Open5GS transfer-update denial of service

33RIESGO

abrir ↗

Referência

CVE-2016-8021

CVE-2016-8021—

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3

23RIESGO

abrir ↗

Referência

CVE-2014-9195

CVE-2014-9195—

Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

85RIESGO

abrir ↗

Referência

CVE-2026-6623

CVE-2026-6623MEDIUM

BichitroGan ISP Billing Software Profile users-view cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-78434

CVE-2026-78434MEDIUM

Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication

33RIESGO

abrir ↗

Referência

CVE-2013-6935

CVE-2013-6935—

Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a

50RIESGO

abrir ↗

Referência

CVE-2011-5267

CVE-2011-5267—

Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as

23RIESGO

abrir ↗

Referência

CVE-2018-5755

CVE-2018-5755—

Absolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite before 7.6.3-rev3, 7.8.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Cuteflow Bin 1.5.0 - 'login.php' Local File Inclusion

CVE-2008-1493—webappsphp

Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbi

23RIESGO

abrir ↗

Referência

CVE-2026-82304

CVE-2026-82304HIGH

Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler

41RIESGO

abrir ↗

Referência

CVE-2026-6003

CVE-2026-6003MEDIUM

code-projects Simple IT Discussion Forum user.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5999

CVE-2026-5999MEDIUM

JeecgBoot SysAnnouncementController improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-5981

CVE-2026-5981HIGH

D-Link DIR-605L POST Request formAdvFirewall buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2014-4312

CVE-2014-4312—

Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote

23RIESGO

abrir ↗

Referência

CVE-2018-25310

CVE-2018-25310MEDIUM

VideoFlow Digital Video Protection DVP 2.10 - Authenticated Remote Code Execution

33RIESGO

abrir ↗

Referência✓ VexDay Proof

PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload

CVE-2008-1496—webappsphp

Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência

CVE-2016-8806

CVE-2016-8806—

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

23RIESGO

abrir ↗

Referência

CVE-2026-5980

CVE-2026-5980HIGH

D-Link DIR-605L POST Request formSetMACFilter buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2023-54364

CVE-2023-54364MEDIUM

Joomla HikaShop 4.7.4 Reflected XSS via Product Filter

33RIESGO

abrir ↗

Referência

CVE-2023-54363

CVE-2023-54363MEDIUM

Joomla Solidres 2.13.3 Reflected XSS via Multiple Parameters

33RIESGO

abrir ↗

Referência

CVE-2023-54362

CVE-2023-54362MEDIUM

Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword

33RIESGO

abrir ↗

Referência

CVE-2023-54361

CVE-2023-54361MEDIUM

Joomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keyword

33RIESGO

abrir ↗

Referência

CVE-2018-25318

CVE-2018-25318CRITICAL

Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change

48RIESGO

abrir ↗

Referência

CVE-2018-25317

CVE-2018-25317CRITICAL

Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change

48RIESGO

abrir ↗

Referência

CVE-2018-25316

CVE-2018-25316CRITICAL

Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change

48RIESGO

abrir ↗

Referência

CVE-2018-25315

CVE-2018-25315HIGH

Alloksoft Video joiner 4.6.1217 Buffer Overflow via License Name

41RIESGO

abrir ↗

Referência

CVE-2018-25314

CVE-2018-25314HIGH

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer Overflow

41RIESGO

abrir ↗

Referência

CVE-2018-25313

CVE-2018-25313MEDIUM

SysGauge 4.5.18 Local Denial of Service via Proxy Configuration

33RIESGO

abrir ↗

Referência

CVE-2018-25304

CVE-2018-25304HIGH

Free Download Manager 2.0 Build 417 Local Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2026-6014

CVE-2026-6014HIGH

D-Link DIR-513 POST Request formAdvanceSetup buffer overflow

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.