Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-16628
CVE-2026-16628MEDIUM
oclif JIT Plugin Entry child_process.exec os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-32848
CVE-2026-32848MEDIUM
NetBSD cryptodev Race Condition Double-Free via cryptodev_op()
33RIESGO
abrir ↗
Referência
CVE-2026-32849
CVE-2026-32849MEDIUM
NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c
33RIESGO
abrir ↗
Referência
CVE-2018-17587
CVE-2018-17587—
AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-9534
CVE-2026-9534MEDIUM
Totolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injection
38RIESGO
abrir ↗
Referência
CVE-2026-9484
CVE-2026-9484MEDIUM
SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-116115
CVE-2026-116115LOW
Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization
28RIESGO
abrir ↗
Referência
CVE-2018-17588
CVE-2018-17588—
AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-6268
CVE-2026-6268HIGH
EventPress < 22.2 – Reflected Cross-Site Scripting
41RIESGO
abrir ↗
Referência
CVE-2026-116114
CVE-2026-116114MEDIUM
Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Bloggie Lite 0.0.2 Beta - Insecure Cookie Handling / SQL Injection
CVE-2008-5004—webappsphp
SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2026-16198
CVE-2026-16198MEDIUM
Sipeed PicoClaw First Run Setup access_control.go authentication bypass
33RIESGO
abrir ↗
Referência
CVE-2026-9533
CVE-2026-9533MEDIUM
Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injection
38RIESGO
abrir ↗
Referência
CVE-2026-111981
CVE-2026-111981LOW
GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses
28RIESGO
abrir ↗
Referência
CVE-2026-111980
CVE-2026-111980MEDIUM
GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant
33RIESGO
abrir ↗
Referência
CVE-2026-9361
CVE-2026-9361MEDIUM
Edimax EW-7438RPn POST Request formAccep formAccept command injection
33RIESGO
abrir ↗
Referência
CVE-2026-9356
CVE-2026-9356MEDIUM
SourceCodester Hospitals Patient Records Management System manage_history.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9350
CVE-2026-9350MEDIUM
NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization
33RIESGO
abrir ↗
Referência
CVE-2026-9349
CVE-2026-9349MEDIUM
calcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosure
33RIESGO
abrir ↗
Referência
CVE-2018-25358
CVE-2018-25358HIGH
D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi
41RIESGO
abrir ↗
Referência
CVE-2018-25356
CVE-2018-25356HIGH
SIPp 3.6 Local Buffer Overflow via Command-line Arguments
41RIESGO
abrir ↗
Referência
CVE-2018-25355
CVE-2018-25355HIGH
Audiograbber 1.83 Local Buffer Overflow via SEH
41RIESGO
abrir ↗
Referência
CVE-2018-25353
CVE-2018-25353HIGH
Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload
41RIESGO
abrir ↗
Referência
CVE-2018-18803
CVE-2018-18803—
Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb
23RIESGO
abrir ↗
Referência
CVE-2018-18803
CVE-2018-18803—
Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb
23RIESGO
abrir ↗
Referência
CVE-2018-25352
CVE-2018-25352HIGH
WordPress Ultimate Form Builder Lite 1.3.7 SQL Injection via entry_id
41RIESGO
abrir ↗
Referência
CVE-2018-25344
CVE-2018-25344HIGH
10-Strike Network Inventory Explorer 8.54 Buffer Overflow SEH
41RIESGO
abrir ↗
Referência
CVE-2018-25343
CVE-2018-25343MEDIUM
Smartshop 1 Cross-Site Request Forgery via editprofile.php
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo
CVE-2008-5323—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Referência
CVE-2018-18805
CVE-2018-18805—
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.
23RIESGO
abrir ↗
← anteriorpágina 825 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.