Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2018-25411
CVE-2018-25411HIGH
MGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php
41RIESGO
abrir ↗
Referência
CVE-2026-16155
CVE-2026-16155MEDIUM
SourceCodester Class and Exam Timetabling System schoolyr.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-16447
CVE-2026-16447MEDIUM
D-Link DNS-320 multi_uploadify.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-16489
CVE-2026-16489MEDIUM
jsforce SFDX Connection Registry sfdx.js _execCommand os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-19712
CVE-2026-19712MEDIUM
Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description
33RIESGO
abrir ↗
Referência
CVE-2026-16154
CVE-2026-16154MEDIUM
SourceCodester Class and Exam Timetabling System edit_room1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-7658
CVE-2018-7658—
NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service
35RIESGO
abrir ↗
Referência
CVE-2018-25383
CVE-2018-25383HIGH
Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass
41RIESGO
abrir ↗
Referência
CVE-2026-10126
CVE-2026-10126HIGH
Edimax BR-6478AC POST Request formQoS buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-11478
CVE-2026-11478MEDIUM
kokke tiny-regex-c Pattern re.c matchstar redos
33RIESGO
abrir ↗
Referência
CVE-2023-54351
CVE-2023-54351MEDIUM
WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments
33RIESGO
abrir ↗
Referência
WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) - Authenticated RCE
CVE-2023-27826HIGHremotehardware
SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Inj
46RIESGO
abrir ↗
Referência
CVE-2018-17590
CVE-2018-17590—
AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência
CVE-2018-17590
CVE-2018-17590—
AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência
CVE-2018-8449
CVE-2018-8449—
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security F
23RIESGO
abrir ↗
Referência
CVE-2023-54350
CVE-2023-54350HIGH
WordPress Augmented-Reality Plugin Remote Code Execution Unauthenticated
41RIESGO
abrir ↗
Referência
CVE-2026-90805
CVE-2026-90805MEDIUM
subhajitkhan online-clinic-management-system doctorlogin.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-90620
CVE-2026-90620MEDIUM
0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication
33RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPartenaire 1.0 - 'dix.php3' Remote File Inclusion
CVE-2006-5032—webappsphp
PHP remote file inclusion vulnerability in dix.php3 in PHPartenaire 1.0 allows remote attackers to execute arbitrary PHP
23RIESGO
abrir ↗
Referência
CVE-2026-90618
CVE-2026-90618MEDIUM
GH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-90584
CVE-2026-90584MEDIUM
TooTallNate Java-WebSocket Fragmentation Draft_6455.java processFrameContinuousAndNonFin allocation of resources
33RIESGO
abrir ↗
Referência
CVE-2026-11480
CVE-2026-11480MEDIUM
Chengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-11479
CVE-2026-11479LOW
yoanbernabeu grepai Qdrant Backend chunker.go weak hash
28RIESGO
abrir ↗
Referência
CVE-2026-11486
CVE-2026-11486MEDIUM
SourceCodester Class and Exam Timetabling System archive1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-11485
CVE-2026-11485MEDIUM
SourceCodester Class and Exam Timetabling System archive2.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Joomlaboard 1.1.1 - 'sbp' Remote File Inclusion
CVE-2006-5043—webappsphp
Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component (com_joomlaboard) before 1.1.2 for
23RIESGO
abrir ↗
Referência
CVE-2018-17593
CVE-2018-17593—
AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência
CVE-2018-17593
CVE-2018-17593—
AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗
Referência
CVE-2018-17775
CVE-2018-17775—
Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local us
23RIESGO
abrir ↗
Referência
CVE-2019-7254
CVE-2019-7254—
Linear eMerge E3-Series devices allow File Inclusion.
60RIESGO
abrir ↗
← anteriorpágina 842 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.