Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-9500
CVE-2026-9500MEDIUM
GNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-9486
CVE-2026-9486MEDIUM
SourceCodester Student Grades Management System cross-site request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-9480
CVE-2026-9480HIGH
Edimax EW-7438RPn formrefresh stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2014-8440
CVE-2014-8440—
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on
60RIESGO
abrir ↗
Referência
CVE-2026-10694
CVE-2026-10694MEDIUM
SourceCodester Online Food Ordering System index.php include file inclusion
33RIESGO
abrir ↗
Referência
CVE-2014-8555
CVE-2014-8555—
Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' install Method
CVE-2008-0551—remotewindows
The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong N
28RIESGO
abrir ↗
Referência
CVE-2026-10163
CVE-2026-10163HIGH
Edimax BR-6478AC POST Request formUSBAccount buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2015-4118
CVE-2015-4118—
SQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows remote authenticated user
23RIESGO
abrir ↗
Referência
CVE-2018-6193
CVE-2018-6193—
A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph
23RIESGO
abrir ↗
Referência
CVE-2026-93314
CVE-2026-93314MEDIUM
Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow
33RIESGO
abrir ↗
Referência
CVE-2026-81845
CVE-2026-81845MEDIUM
arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-93313
CVE-2026-93313MEDIUM
Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
33RIESGO
abrir ↗
Referência
CVE-2026-81847
CVE-2026-81847MEDIUM
MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal
33RIESGO
abrir ↗
Referência
CVE-2014-9097
CVE-2014-9097—
Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly
23RIESGO
abrir ↗
Referência
CVE-2020-11108
CVE-2020-11108—
The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abus
60RIESGO
abrir ↗
Referência
CVE-2026-81837
CVE-2026-81837MEDIUM
RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversal
33RIESGO
abrir ↗
Referência✓ VexDay Proof
TIBCO Rendezvous 7.4.11 - Password Extractor
CVE-2006-4676—localwindows
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to
23RIESGO
abrir ↗
Referência
CVE-2026-80049
CVE-2026-80049HIGH
Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId
41RIESGO
abrir ↗
Referência
RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot)
CVE-2020-13259—webappshardware
A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauth
23RIESGO
abrir ↗
Referência
CVE-2026-108704
CVE-2026-108704MEDIUM
CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)
CVE-2008-0590—doswindows
Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of servic
28RIESGO
abrir ↗
Referência
CVE-2017-15963
CVE-2017-15963—
iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser pa
23RIESGO
abrir ↗
Referência
CVE-2026-108703
CVE-2026-108703MEDIUM
CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push
33RIESGO
abrir ↗
Referência
CVE-2015-2094
CVE-2015-2094—
Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to
28RIESGO
abrir ↗
Referência
CVE-2026-79623
CVE-2026-79623MEDIUM
FishCodeTech Muteki Default Local Worker Backend settings.json os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-108653
CVE-2026-108653MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via GET /openapi/list
33RIESGO
abrir ↗
Referência
CVE-2017-15976
CVE-2017-15976—
ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-200
23RIESGO
abrir ↗
Referência
CVE-2026-80051
CVE-2026-80051MEDIUM
github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its
33RIESGO
abrir ↗
Referência
CVE-2026-72714 — Rocq Universe Checking State Desynchronised After Module Close
CVE-2026-72714MEDIUM
Rocq Prover through 9.2.0 Universe Checking State Desynchronised After Module Close
33RIESGO
abrir ↗
← anteriorpágina 805 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.