Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2018-25398
CVE-2018-25398HIGH
The Open ISES Project 3.30A SQL Injection via main.php
41RIESGO
abrir ↗
Referência
CVE-2018-25397
CVE-2018-25397MEDIUM
PHP-SHOP 1.0 Cross-Site Request Forgery via users.php
33RIESGO
abrir ↗
Referência
CVE-2018-25405
CVE-2018-25405HIGH
eNdonesia Portal 8.7 SQL Injection via mod.php
41RIESGO
abrir ↗
Referência
CVE-2026-10115
CVE-2026-10115MEDIUM
Open5GS Shared NF-profile nnrf-handler.c denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-10114
CVE-2026-10114MEDIUM
Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write
33RIESGO
abrir ↗
Referência
CVE-2026-10113
CVE-2026-10113MEDIUM
Open5GS Shared NF-profile nnrf-handler.c denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-10112
CVE-2026-10112MEDIUM
sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-116118
CVE-2026-116118MEDIUM
Z.ai Zcode Sed Command Filter os command injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
YourFreeWorld Classifieds Blaster - SQL Injection
CVE-2008-4900—webappsphp
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2026-9361
CVE-2026-9361MEDIUM
Edimax EW-7438RPn POST Request formAccep formAccept command injection
33RIESGO
abrir ↗
Referência
CVE-2026-9356
CVE-2026-9356MEDIUM
SourceCodester Hospitals Patient Records Management System manage_history.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9350
CVE-2026-9350MEDIUM
NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization
33RIESGO
abrir ↗
Referência
CVE-2026-9349
CVE-2026-9349MEDIUM
calcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosure
33RIESGO
abrir ↗
Referência
CVE-2018-25358
CVE-2018-25358HIGH
D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi
41RIESGO
abrir ↗
Referência
CVE-2018-25356
CVE-2018-25356HIGH
SIPp 3.6 Local Buffer Overflow via Command-line Arguments
41RIESGO
abrir ↗
Referência
CVE-2018-25355
CVE-2018-25355HIGH
Audiograbber 1.83 Local Buffer Overflow via SEH
41RIESGO
abrir ↗
Referência
CVE-2018-25353
CVE-2018-25353HIGH
Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload
41RIESGO
abrir ↗
Referência
CVE-2018-18803
CVE-2018-18803—
Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb
23RIESGO
abrir ↗
Referência
CVE-2018-18803
CVE-2018-18803—
Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb
23RIESGO
abrir ↗
Referência
CVE-2018-25352
CVE-2018-25352HIGH
WordPress Ultimate Form Builder Lite 1.3.7 SQL Injection via entry_id
41RIESGO
abrir ↗
Referência
CVE-2018-25344
CVE-2018-25344HIGH
10-Strike Network Inventory Explorer 8.54 Buffer Overflow SEH
41RIESGO
abrir ↗
Referência
CVE-2018-25343
CVE-2018-25343MEDIUM
Smartshop 1 Cross-Site Request Forgery via editprofile.php
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo
CVE-2008-5323—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Referência
CVE-2018-18805
CVE-2018-18805—
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.
23RIESGO
abrir ↗
Referência
CVE-2026-8252
CVE-2026-8252MEDIUM
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference
33RIESGO
abrir ↗
Referência
CVE-2026-8248
CVE-2026-8248MEDIUM
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
33RIESGO
abrir ↗
Referência
CVE-2021-47953
CVE-2021-47953MEDIUM
OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password
33RIESGO
abrir ↗
Referência
CVE-2021-47951
CVE-2021-47951MEDIUM
WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL
33RIESGO
abrir ↗
Referência
CVE-2021-47950
CVE-2021-47950MEDIUM
Advanced Guestbook 2.4.4 Persistent XSS via Smilies
33RIESGO
abrir ↗
Referência
CVE-2021-47949
CVE-2021-47949HIGH
CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack
41RIESGO
abrir ↗
← anteriorpágina 833 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.