Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
26.494 exploits
Referência
CVE-2026-5987
Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine
33RIESGO
abrir ↗
Referência
CVE-2026-5986
Zod jsVideoUrlParser util.js getTime redos
33RIESGO
abrir ↗
Referência
CVE-2026-5985
code-projects Simple IT Discussion Forum crud.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-18419
Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filen
23RIESGO
abrir ↗
Referência
CVE-2026-5177
Totolink A3300R cstecgi.cgi setWiFiBasicCfg command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5176
Totolink A3300R cstecgi.cgi setSyslogCfg command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5157
code-projects Online Food Ordering System Order order.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5156
Tenda CH22 Parameter QuickIndex formQuickIndex stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5155
Tenda CH22 Parameter AdvSetWan fromAdvSetWan stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5154
Tenda CH22 Parameter setcfm fromSetCfm stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5182
SourceCodester Teacher Record System Parameter sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5181
SourceCodester Simple Doctors Appointment System ajax.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-5180
SourceCodester Simple Doctors Appointment System ajax.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5179
SourceCodester Simple Doctors Appointment System login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5178
Totolink A3300R cstecgi.cgi setIptvCfg command injection
33RIESGO
abrir ↗
Referência
CVE-2017-20227
JAD 1.5.8e-1kali1 Stack-Based Buffer Overflow
48RIESGO
abrir ↗
Referência
CVE-2017-20226
Mapscrn 2.0.3 Stack-Based Buffer Overflow
41RIESGO
abrir ↗
Referência
CVE-2017-20225
TiEmu 2.08 Stack-Based Buffer Overflow Vulnerability
48RIESGO
abrir ↗
Referência
CVE-2016-20049
JAD 1.5.8e-1kali1 Stack-Based Buffer Overflow Remote Code Execution
48RIESGO
abrir ↗
Referência
CVE-2016-20048
iSelect 1.4.0-2+b1 Local Buffer Overflow via key parameter
41RIESGO
abrir ↗
Referência
CVE-2016-20047
EKG Gadu 1.9 Local Buffer Overflow via Username Parameter
41RIESGO
abrir ↗
Referência
CVE-2016-20046
zFTP Client 20061220+dfsg3-4.1 Local Buffer Overflow
41RIESGO
abrir ↗
Referência
CVE-2016-20045
HNB Organizer 1.9.18-10 Local Buffer Overflow via -rc Parameter
41RIESGO
abrir ↗
Referência
CVE-2016-20044
PInfo 0.6.9-5.1 Local Buffer Overflow via -m Parameter
41RIESGO
abrir ↗
Referência
CVE-2016-20043
NRSS RSS Reader 0.3.9-1 Stack Buffer Overflow
41RIESGO
abrir ↗
Referência
CVE-2016-20042
TRN 3.6-23 Stack Buffer Overflow Local Code Execution
41RIESGO
abrir ↗
Referência
CVE-2016-20041
Yasr 0.6.9-5 Buffer Overflow via Command-line Parameter
41RIESGO
abrir ↗
Referência
CVE-2016-20040
TiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter
41RIESGO
abrir ↗
Referência
CVE-2016-20039
Multi Emulator Super System 0.154-3.1 Buffer Overflow
41RIESGO
abrir ↗
Referência
CVE-2016-20038
yTree 1.94-1.1 Stack-Based Buffer Overflow
41RIESGO
abrir ↗
← anteriorpágina 799 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.