Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-19782
CVE-2026-19782MEDIUM
WPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_users
33RIESGO
abrir ↗
Referência
CVE-2026-76582
CVE-2026-76582MEDIUM
TRENDnet TEW-821DAP ssi ping.cgi system command injection
33RIESGO
abrir ↗
Referência
CVE-2026-94094
CVE-2026-94094MEDIUM
OpenClaw Canvas Host Route server.ts createCanvasHostHandler denial of service
33RIESGO
abrir ↗
Referência
CVE-2013-2572
CVE-2013-2572—
A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 d
28RIESGO
abrir ↗
Referência
CVE-2013-2572
CVE-2013-2572—
A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 d
28RIESGO
abrir ↗
Referência
CVE-2026-19812
CVE-2026-19812HIGH
TOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-15049
CVE-2026-15049HIGH
Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Gregarius 0.5.4 - SQL Injection
CVE-2008-3374—webappsphp
SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2014-6332
CVE-2014-6332HIGHbajo ataque
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
100RIESGO
abrir ↗
Referência
CVE-2012-4055
CVE-2012-4055—
SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2017-0358
CVE-2017-0358HIGH
ntfs-3g: Modprobe influence vulnerability via environment variables
56RIESGO
abrir ↗
Referência
CVE-2018-9155
CVE-2018-9155—
Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗
Referência
CVE-2018-9206
CVE-2018-9206—
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
60RIESGO
abrir ↗
Referência✓ VexDay Proof
Wsn (Multiple Products) - Local File Inclusion / Code Execution
CVE-2008-3555—webappsphp
Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3)
23RIESGO
abrir ↗
Referência
CVE-2026-84021
CVE-2026-84021MEDIUM
Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via bt_bb_button/bt_bb_headline/bt_bb_icon URL
33RIESGO
abrir ↗
Referência
CVE-2012-4252
CVE-2012-4252—
Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the au
23RIESGO
abrir ↗
Referência
CVE-2026-82846
CVE-2026-82846MEDIUM
Masteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom Fields
33RIESGO
abrir ↗
Referência
CVE-2018-9445
CVE-2018-9445—
In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vacation Rental Script 3.0 - 'id' SQL Injection
CVE-2008-3603—webappsphp
SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2026-81348
CVE-2026-81348LOW
My Private Site < 4.2.3 - Unauthenticated Sensitive Information Exposure via RSS Feeds and Sitemap
28RIESGO
abrir ↗
Referência
CVE-2026-4935
CVE-2026-4935HIGH
SureTriggers < 1.1.23 – Unauthenticated SQLi
41RIESGO
abrir ↗
Referência✓ VexDay Proof
OSSIM 0.9.9rc5 - Cross-Site Scripting / SQL Injection
CVE-2008-0919—webappsphp
Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9
23RIESGO
abrir ↗
Referência✓ VexDay Proof
D-Bus Daemon < 1.2.4 - 'libdbus' Denial of Service
CVE-2008-3834—dosmultiple
The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a deni
23RIESGO
abrir ↗
Referência
CVE-2026-18614
CVE-2026-18614CRITICAL
GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection
48RIESGO
abrir ↗
Referência
CVE-2026-7810
CVE-2026-7810MEDIUM
UsamaK98 python-notebook-mcp server.py add_cell path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-41471
CVE-2026-41471HIGH
Easy PayPal Events & Tickets < 1.4 Information Disclosure via QR Code Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-14195
CVE-2026-14195LOW
Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info
28RIESGO
abrir ↗
Referência
CVE-2026-29514
CVE-2026-29514HIGH
NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin
41RIESGO
abrir ↗
Referência
SPBAS Business Automation Software 2012 - Multiple Vulnerabilities
CVE-2013-4664—webappsphp
SPBAS Business Automation Software 2012 has XSS.
23RIESGO
abrir ↗
Referência
CVE-2026-14834
CVE-2026-14834MEDIUM
Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX
33RIESGO
abrir ↗
← anteriorpágina 815 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.