Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.055exploits catalogados

40.803CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.350VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência✓ VexDay Proof

Joomla! Component DT Register - SQL Injection

CVE-2008-3265—webappsphp

SQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla! allows remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2026-6188

CVE-2026-6188MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6187

CVE-2026-6187MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2018-8880

CVE-2018-8880—

Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing th

28RIESGO

abrir ↗

Referência

CVE-2026-6196

CVE-2026-6196HIGH

Tenda F456 exeCommand fromexeCommand stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6195

CVE-2026-6195CRITICAL

Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection

53RIESGO

abrir ↗

Referência

CVE-2026-6194

CVE-2026-6194HIGH

Totolink A3002MU HTTP Request formWlanSetup sub_410188 stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-6193

CVE-2026-6193MEDIUM

PHPGurukul Daily Expense Tracking System register.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6192

CVE-2026-6192MEDIUM

uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow

33RIESGO

abrir ↗

Referência

CVE-2018-25235

CVE-2018-25235MEDIUM

NetworkActiv Web Server 4.0 Username Field Buffer Overflow DoS

33RIESGO

abrir ↗

Referência

CVE-2018-25234

CVE-2018-25234MEDIUM

SmartFTP Client 9.0.2615.0 Denial of Service via Host Field

33RIESGO

abrir ↗

Referência

CVE-2018-25233

CVE-2018-25233MEDIUM

WebDrive 18.00.5057 Denial of Service via Secure WebDAV

33RIESGO

abrir ↗

Referência

CVE-2018-25232

CVE-2018-25232MEDIUM

Softros LAN Messenger 9.2 Denial of Service via Log Files Location

33RIESGO

abrir ↗

Referência

CVE-2018-25231

CVE-2018-25231MEDIUM

HeidiSQL 9.5.0.5196 Denial of Service via Preferences

33RIESGO

abrir ↗

Referência

CVE-2018-25230

CVE-2018-25230MEDIUM

Free IP Switcher 3.1 Denial of Service via Computer Name

33RIESGO

abrir ↗

Referência

CVE-2018-25229

CVE-2018-25229MEDIUM

BulletProof FTP Server 2019.0.0.50 Denial of Service via SMTP

33RIESGO

abrir ↗

Referência

CVE-2018-25228

CVE-2018-25228MEDIUM

NetSetMan 4.7.1 Workgroup Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2018-25227

CVE-2018-25227MEDIUM

Valentina Studio 9.0.4 Denial of Service via Host Parameter

33RIESGO

abrir ↗

Referência

CVE-2018-25226

CVE-2018-25226MEDIUM

FTPShell Server 6.83 Denial of Service via Account Name

33RIESGO

abrir ↗

Referência

CVE-2026-87848

CVE-2026-87848LOW

MPCX Lightbox 1.2.2 - 1.2.5 - Unauthenticated Non-Public Post Content Disclosure

28RIESGO

abrir ↗

Referência

CVE-2026-13484

CVE-2026-13484LOW

MLflow Experiment-scoped Label Schema CRUD API authorization

28RIESGO

abrir ↗

Referência

CVE-2026-94095

CVE-2026-94095CRITICAL

Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection

48RIESGO

abrir ↗

Referência

CVE-2026-78181

CVE-2026-78181MEDIUM

ractivejs ractive Keypath Ractive#set prototype pollution

33RIESGO

abrir ↗

Referência

CVE-2026-19718

CVE-2026-19718HIGH

BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery

41RIESGO

abrir ↗

Referência

CVE-2026-94532

CVE-2026-94532HIGH

lamp-cloud through 5.10.0 Unauthorized User Profile Access via getUserInfoById

41RIESGO

abrir ↗

Referência

CVE-2026-19268

CVE-2026-19268MEDIUM

abdullah1854 MCPGateway Claude Usage Range Endpoint claude-usage.ts getUsageByDateRange command injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer - 'MDAC' Remote Code Execution (MS06-014) (Metasploit) (2)

CVE-2006-0003—remotewindows

Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and dis

60RIESGO

abrir ↗

Referência

CVE-2026-80182

CVE-2026-80182HIGH

In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped au

41RIESGO

abrir ↗

Referência

CVE-2026-12779

CVE-2026-12779HIGH

AOMEI Dynamic Disk Manager Kernel Driver ddmdrv.sys access control

41RIESGO

abrir ↗

Referência✓ VexDay Proof

IntelliTamper 2.07 - HTTP Header Remote Code Execution

CVE-2008-3361—remotewindows

Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Serv

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.