Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-7137
CVE-2026-7137CRITICAL
Totolink A8000RU CGI cstecgi.cgi setStorageCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-41467
CVE-2026-41467MEDIUM
ProjeQtor < 12.4.4 Stored XSS via checkValidFileName()
33RIESGO
abrir ↗
Referência
CVE-2026-41466
CVE-2026-41466MEDIUM
ProjeQtor < 12.4.4 Stored XSS via checkValidHtmlText()
33RIESGO
abrir ↗
Referência
CVE-2026-7013
CVE-2026-7013MEDIUM
MaxSite CMS mail_send Plugin cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-7012
CVE-2026-7012MEDIUM
MaxSite CMS Redirect Plugin cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2018-25277
CVE-2018-25277MEDIUM
PixGPS 1.1.8 Buffer Overflow Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2026-7018
CVE-2026-7018MEDIUM
Datavane Datavines JWT Token TokenManager.java hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2018-25373
CVE-2018-25373HIGH
DVD Photo Slideshow Professional 8.07 Buffer Overflow SEH
41RIESGO
abrir ↗
Referência
CVE-2024-14032
CVE-2024-14032HIGH
Twitch Studio LauncherHelper XPC Missing Authorization to Root File Write
41RIESGO
abrir ↗
Referência
CVE-2026-5666
CVE-2026-5666MEDIUM
code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information
33RIESGO
abrir ↗
Referência
CVE-2026-5665
CVE-2026-5665MEDIUM
code-projects Online FIR System Login checklogin.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5661
CVE-2026-5661MEDIUM
Free5GC NGSetupRequest denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-5660
CVE-2026-5660MEDIUM
itsourcecode Construction Management System Parameter borrowed_equip.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7016
CVE-2026-7016MEDIUM
MaxSite CMS ushki Plugin cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2018-25276
CVE-2018-25276MEDIUM
RoboImport 1.2.0.72 Denial of Service via Registration Fields
33RIESGO
abrir ↗
Referência
CVE-2018-25275
CVE-2018-25275MEDIUM
Faleemi Plus 1.0.2 Denial of Service via Buffer Overflow
33RIESGO
abrir ↗
Referência
CVE-2018-25274
CVE-2018-25274MEDIUM
InfraRecorder 0.53 Denial of Service via txt File Import
33RIESGO
abrir ↗
Referência
CVE-2018-25273
CVE-2018-25273MEDIUM
CrossFont 7.5 Denial of Service via License Key Field
33RIESGO
abrir ↗
Referência
CVE-2026-7019
CVE-2026-7019HIGH
Tenda F456 P2pListFilter fromP2pListFilter buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7015
CVE-2026-7015MEDIUM
MaxSite CMS Guestbook Plugin cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-7014
CVE-2026-7014MEDIUM
MaxSite CMS down_count Plugin cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2016-20053
CVE-2016-20053MEDIUM
Redaxo CMS 5.2 Cross-Site Request Forgery via users endpoint
33RIESGO
abrir ↗
Referência
CVE-2016-6433
CVE-2016-6433—
The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users
60RIESGO
abrir ↗
Referência
CVE-2026-19963
CVE-2026-19963MEDIUM
Edimax EW-7478APC stainfo command injection
33RIESGO
abrir ↗
Referência
CVE-2026-75082
CVE-2026-75082MEDIUM
Webkul Bagisto Customer-Registration Notification Email register cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5418
CVE-2026-5418MEDIUM
appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-5472
CVE-2026-5472MEDIUM
ProjectsAndPrograms School Management System Profile Picture settings.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-5471
CVE-2026-5471MEDIUM
Investory Toy Planet Trouble App app.investory.toyfactory google-services-desktop.json hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-5470
CVE-2026-5470MEDIUM
mixelpixx Google-Research-MCP Model Context Protocol content-extractor.service.ts extractContent server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-5462
CVE-2026-5462MEDIUM
Wahoo Fitness SYSTM App com.WahooFitness.SYSTM BuildConfig.java hard-coded key
33RIESGO
abrir ↗
← anteriorpágina 796 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.