Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-5660
CVE-2026-5660MEDIUM
itsourcecode Construction Management System Parameter borrowed_equip.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7016
CVE-2026-7016MEDIUM
MaxSite CMS ushki Plugin cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2018-25276
CVE-2018-25276MEDIUM
RoboImport 1.2.0.72 Denial of Service via Registration Fields
33RIESGO
abrir ↗
Referência
CVE-2018-25275
CVE-2018-25275MEDIUM
Faleemi Plus 1.0.2 Denial of Service via Buffer Overflow
33RIESGO
abrir ↗
Referência
CVE-2018-25274
CVE-2018-25274MEDIUM
InfraRecorder 0.53 Denial of Service via txt File Import
33RIESGO
abrir ↗
Referência
CVE-2018-25273
CVE-2018-25273MEDIUM
CrossFont 7.5 Denial of Service via License Key Field
33RIESGO
abrir ↗
Referência
CVE-2026-7019
CVE-2026-7019HIGH
Tenda F456 P2pListFilter fromP2pListFilter buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7015
CVE-2026-7015MEDIUM
MaxSite CMS Guestbook Plugin cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-7014
CVE-2026-7014MEDIUM
MaxSite CMS down_count Plugin cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2021-45783
CVE-2021-45783—
Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to
23RIESGO
abrir ↗
Referência
CVE-2026-5611
CVE-2026-5611HIGH
Belkin F9K1015 formCrossBandSwitch stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5610
CVE-2026-5610HIGH
Belkin F9K1015 formWISP5G stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5609
CVE-2026-5609HIGH
Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5608
CVE-2026-5608HIGH
Belkin F9K1122 formWlanSetup stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5607
CVE-2026-5607MEDIUM
imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2019-25692
CVE-2019-25692HIGH
Kados R10 GreenBee SQL Injection via id_to_modify Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25690
CVE-2019-25690HIGH
Kados R10 GreenBee SQL Injection via mng_profile_id
41RIESGO
abrir ↗
Referência
CVE-2019-25688
CVE-2019-25688HIGH
Kados R10 GreenBee SQL Injection via menu_lev1 Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25686
CVE-2019-25686HIGH
Core FTP 2.0 build 653 PBSZ Unauthenticated Denial of Service
41RIESGO
abrir ↗
Referência
CVE-2019-25684
CVE-2019-25684HIGH
OpenDocMan 1.3.4 SQL Injection via where Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25683
CVE-2019-25683MEDIUM
FileZilla 3.40.0 Denial of Service via Local Search
33RIESGO
abrir ↗
Referência
CVE-2019-25682
CVE-2019-25682MEDIUM
CMSsite 1.0 Cross-Site Request Forgery via users.php
33RIESGO
abrir ↗
Referência
CVE-2019-25681
CVE-2019-25681HIGH
Xlight FTP Server 3.9.1 SEH Overwrite Buffer Overflow
41RIESGO
abrir ↗
Referência
CVE-2019-25680
CVE-2019-25680HIGH
Advance Gift Shop Pro Script 2.0.3 SQL Injection via search
41RIESGO
abrir ↗
Referência
CVE-2019-25679
CVE-2019-25679HIGH
RealTerm Serial Terminal 2.0.0.70 Buffer Overflow SEH
41RIESGO
abrir ↗
Referência
CVE-2019-25678
CVE-2019-25678HIGH
C4G BLIS 3.4 SQL Injection via users_select.php
41RIESGO
abrir ↗
Referência
CVE-2019-25677
CVE-2019-25677MEDIUM
WinRAR 5.61 Denial of Service via Malformed Language File
33RIESGO
abrir ↗
Referência
CVE-2019-25674
CVE-2019-25674HIGH
CMSsite 1.0 SQL Injection via post Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25673
CVE-2019-25673HIGH
UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload
41RIESGO
abrir ↗
Referência
CVE-2019-25672
CVE-2019-25672HIGH
PilusCart 1.4.1 SQL Injection via send Parameter
41RIESGO
abrir ↗
← anteriorpágina 791 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.