Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

21.624 exploits

Referência

CVE-2026-14651

CVE-2026-14651MEDIUM

connorskees grass visitor denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-14650

CVE-2026-14650MEDIUM

connorskees grass UTF-8 Character raw_to_parse_error denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-14648

CVE-2026-14648MEDIUM

code-projects Online Voting System Login authentication.php test_input sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14647

CVE-2026-14647MEDIUM

onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds

33RIESGO

abrir ↗

Referência

CVE-2026-14642

CVE-2026-14642MEDIUM

SourceCodester Class and Exam Timetabling System edit_class2.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14629

CVE-2026-14629MEDIUM

RT-Thread Parameter lwp_syscall.c sys_ioctl divide by zero

33RIESGO

abrir ↗

Referência

CVE-2026-14628

CVE-2026-14628MEDIUM

NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-14627

CVE-2026-14627MEDIUM

NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper authentication

33RIESGO

abrir ↗

Referência

CVE-2026-12196

CVE-2026-12196HIGH

HestiaCP Admin Takeover

41RIESGO

abrir ↗

Referência

CVE-2026-14626

CVE-2026-14626MEDIUM

NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-14625

CVE-2026-14625MEDIUM

NousResearch hermes-agent server.py shell.exec protection mechanism

33RIESGO

abrir ↗

Referência

CVE-2026-14624

CVE-2026-14624MEDIUM

omec-project amf NGSetupRequest handler.go denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-11883

CVE-2026-11883HIGH

WebAuthn Provider for Two Factor < 2.5.6 - 2FA Bypass

41RIESGO

abrir ↗

Referência

CVE-2026-11880

CVE-2026-11880LOW

Fluent Forms < 6.2.1 - Subscriber+ Subscription Cancellation via IDOR

28RIESGO

abrir ↗

Referência

CVE-2026-11794

CVE-2026-11794HIGH

Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping

41RIESGO

abrir ↗

Referência

CVE-2026-11562

CVE-2026-11562MEDIUM

WS Form LITE < 1.11.8 - Subscriber+ Arbitrary Settings Update

33RIESGO

abrir ↗

Referência

CVE-2026-10750

CVE-2026-10750HIGH

Royal MCP < 1.4.26 - Subscriber+ Insufficient Authorization in MCP Tools

41RIESGO

abrir ↗

Referência

CVE-2025-15666

CVE-2025-15666MEDIUM

Open Asset Import Library Assimp Model File SceneCombiner.cpp Copy heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-58172

CVE-2026-58172CRITICAL

Ocelot - IP Allow/Block List Bypass for WebSocket Upgrade Requests

48RIESGO

abrir ↗

Referência

CVE-2026-58166

CVE-2026-58166HIGH

OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete

41RIESGO

abrir ↗

Referência

CVE-2026-58116

CVE-2026-58116CRITICAL

LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path

48RIESGO

abrir ↗

Referência

CVE-2026-13580

CVE-2026-13580HIGH

Edimax EW-7478APC POST Request formQoS buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-13545

CVE-2026-13545HIGH

D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection

41RIESGO

abrir ↗

Referência

CVE-2026-13544

CVE-2026-13544MEDIUM

Feehi CMS API users access control

33RIESGO

abrir ↗

Referência

CVE-2026-13541

CVE-2026-13541MEDIUM

itsourcecode Hospital Management System doctorchangepassword.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13531

CVE-2026-13531MEDIUM

itsourcecode Hospital Management System department.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13530

CVE-2026-13530MEDIUM

itsourcecode Hospital Management System Appointment appointmentdetail.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13529

CVE-2026-13529MEDIUM

YzmCMS index.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13528

CVE-2026-13528MEDIUM

YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-13515

CVE-2026-13515HIGH

Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.