Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-6153
CVE-2026-6153MEDIUM
code-projects Vehicle Showroom Management System StaffDetailsFunction.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6152
CVE-2026-6152MEDIUM
code-projects Vehicle Showroom Management System StaffAddingFunction.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6151
CVE-2026-6151MEDIUM
code-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6150
CVE-2026-6150MEDIUM
code-projects Simple Laundry System checkupdatestatus.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6184
CVE-2026-6184MEDIUM
code-projects Simple Content Management System welcome.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6183
CVE-2026-6183MEDIUM
code-projects Simple Content Management System index.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6158
CVE-2026-6158MEDIUM
Totolink N300RH upgrade.so setUpgradeUboot os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-6157
CVE-2026-6157HIGH
Totolink A800R app.so setAppEasyWizardConfig buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-6156
CVE-2026-6156CRITICAL
Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-6597
CVE-2026-6597MEDIUM
langflow-ai langflow Flow Using API core.py has_api_terms credentials storage
33RIESGO
abrir ↗
Referência
CVE-2026-6596
CVE-2026-6596MEDIUM
langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-6595
CVE-2026-6595MEDIUM
ProjectsAndPrograms School Management System HTTP GET Parameter buslocation.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6581
CVE-2026-6581HIGH
H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Neat weblog 0.2 - 'articleId' SQL Injection
CVE-2008-1639—webappsphp
SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection
CVE-2008-1640—webappsphp
SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Boa
23RIESGO
abrir ↗
Referência
CVE-2019-0731
CVE-2019-0731—
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Active Web Mail 4 - Authentication Bypass
CVE-2008-5973—webappsasp
SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2026-5251
CVE-2026-5251MEDIUM
z-9527 admin User Update Endpoint user.js dynamically-determined object attributes
33RIESGO
abrir ↗
Referência
CVE-2026-5249
CVE-2026-5249MEDIUM
gougucms Record Endpoint record.html cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5248
CVE-2026-5248MEDIUM
gougucms User Registration Login.php reg_submit dynamically-determined object attributes
33RIESGO
abrir ↗
Referência
CVE-2026-35057
CVE-2026-35057MEDIUM
XenForo Stored Cross-Site Scripting via Structured Text Mentions
33RIESGO
abrir ↗
Referência
CVE-2003-1325
CVE-2003-1325—
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) 7.5.1 - 'OVAS.exe' Overflow (SEH)
CVE-2008-1697—remotewindows
Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows
60RIESGO
abrir ↗
Referência
CVE-2026-5323
CVE-2026-5323MEDIUM
priyankark a11y-mcp index.js A11yServer server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-1540
CVE-2026-1540HIGH
Spam Protect for Contact Form 7 < 1.2.10 - Editor+ Remote Code Execution
41RIESGO
abrir ↗
Referência
CVE-2026-5322
CVE-2026-5322MEDIUM
AlejandroArciniegas mcp-data-vis MCP server.js request sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5321
CVE-2026-5321MEDIUM
vanna-ai vanna FastAPI/Flask Server cross-domain policy
33RIESGO
abrir ↗
Referência
CVE-2026-5320
CVE-2026-5320MEDIUM
vanna-ai vanna Chat API Endpoint v2 missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-5319
CVE-2026-5319MEDIUM
itsourcecode Payroll Management System navbar.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5318
CVE-2026-5318MEDIUM
LibRaw JPEG DHT losslessjpeg.cpp initval out-of-bounds write
33RIESGO
abrir ↗
← anteriorpágina 793 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.