Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2006-5190

CVE-2006-5190—

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RIESGO

abrir ↗

Referência

CVE-2026-14300

CVE-2026-14300HIGH

miniOrange Social Login and Register < 7.8.0 - Unauthenticated Account Takeover

41RIESGO

abrir ↗

Referência

CVE-2026-67277

CVE-2026-67277HIGHbajo ataque

Kernel memory disclosure and denial of service in MikroTik RouterOS btest service

71RIESGO

abrir ↗

Referência

CVE-2018-18322

CVE-2018-18322—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/ind

28RIESGO

abrir ↗

Referência

CVE-2018-25342

CVE-2018-25342HIGH

Smartshop 1 SQL Injection via search.php

41RIESGO

abrir ↗

Referência

CVE-2018-25341

CVE-2018-25341HIGH

Smartshop 1 SQL Injection via product.php id Parameter

41RIESGO

abrir ↗

Referência

CVE-2018-18325

CVE-2018-18325HIGHbajo ataque

DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue ex

100RIESGO

abrir ↗

Referência

CVE-2026-94034

CVE-2026-94034MEDIUM

SourceCodester Drug Recommendation System Password Change change_password cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-10526

CVE-2026-10526MEDIUM

EmbedPress < 4.6.1 - Unauthenticated Blind SSRF

33RIESGO

abrir ↗

Referência

CVE-2026-64827

CVE-2026-64827CRITICAL

Telenia TVox 26.5.3 Authentication Bypass via set_env.php

48RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Office 2003 - '.PPT' Local Buffer Overflow (PoC)

CVE-2006-5296—doswindows

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record

28RIESGO

abrir ↗

Referência✓ VexDay Proof

phpBB lat2cyr Mod 1.0.1 - 'lat2cyr.php' Remote File Inclusion

CVE-2006-5305—webappsphp

PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attac

23RIESGO

abrir ↗

Referência

CVE-2026-93955

CVE-2026-93955MEDIUM

grimmory-tools grimmory Download Endpoint KoboController.java streamFileToResponse authorization

33RIESGO

abrir ↗

Referência

CVE-2018-18428

CVE-2018-18428—

TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg

28RIESGO

abrir ↗

Referência

Core FTP Server FTP / SFTP Server v2 Build 674 - 'MDTM' Directory Traversal

CVE-2019-9649—doswindows

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. Using the MDTM FTP command, a remote att

28RIESGO

abrir ↗

Referência

CVE-2018-18437

CVE-2018-18437—

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc paramete

23RIESGO

abrir ↗

Referência

CVE-2026-84888

CVE-2026-84888MEDIUM

RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation

33RIESGO

abrir ↗

Referência

CVE-2018-18619

CVE-2018-18619—

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability bec

23RIESGO

abrir ↗

Referência

CVE-2026-82182

CVE-2026-82182MEDIUM

WPvivid Backup & Migration < 0.9.133 - Admin+ SQLi via Upload Cleaner Isolation

33RIESGO

abrir ↗

Referência

CVE-2019-9692

CVE-2019-9692—

class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard

50RIESGO

abrir ↗

Referência

CVE-2026-84839

CVE-2026-84839MEDIUM

tsi-coop tsi-dpdp-cms Admin Console/DPO Compliance Console web.xml missing authentication

33RIESGO

abrir ↗

Referência

CVE-2019-0230

CVE-2019-0230—

Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lea

60RIESGO

abrir ↗

Referência✓ VexDay Proof

Open Meetings Filing Application - Remote File Inclusion

CVE-2006-5517—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote

28RIESGO

abrir ↗

Referência

CVE-2018-25359

CVE-2018-25359HIGH

Splinterware System Scheduler Pro 5.12 Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2026-9464

CVE-2026-9464MEDIUM

YunaiV yudao-cloud Admin API Endpoint create IotDataSinkHttpConfig server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-9462

CVE-2026-9462HIGH

Edimax EW-7438RPn formWpsProxyEnable stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-9425

CVE-2026-9425HIGH

Edimax EW-7438RPn formWlanMP stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-9424

CVE-2026-9424MEDIUM

Edimax EW-7438RPn Content-Type formWlanMP os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-9423

CVE-2026-9423MEDIUM

Edimax BR-6675nD POST Request mp command injection

33RIESGO

abrir ↗

Referência

CVE-2026-9419

CVE-2026-9419MEDIUM

code-projects Employee Management System empproject.php cross site scripting

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.