Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.534exploits catalogados
40.282CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.110Exploit-DB 24.488GitHub PoC 17.842VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.110 exploits
Referência
CVE-2026-4972
code-projects Online Reviewer System btn_functions.php cross site scripting
33RIESGO
abrir ↗Referência
CVE-2026-4970
code-projects Social Networking Site Endpoint delete_photos.php sql injection
33RIESGO
abrir ↗Referência
CVE-2026-4969
code-projects Social Networking Site Alert home.php cross site scripting
33RIESGO
abrir ↗Referência
CVE-2026-4966
itsourcecode Free Hotel Reservation System index.php sql injection
33RIESGO
abrir ↗Referência
CVE-2026-4965
letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection
33RIESGO
abrir ↗Referência
CVE-2026-4964
letta-ai letta File URL message_helper.py _convert_message_create_to_message server-side request forgery
33RIESGO
abrir ↗Referência
CVE-2026-4963
huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection
33RIESGO
abrir ↗Referência
CVE-2026-4961
Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow
41RIESGO
abrir ↗Referência
CVE-2026-4960
Tenda AC6 POST Request WizardHandle fromWizardHandle stack-based overflow
41RIESGO
abrir ↗Referência
CVE-2026-4959
OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication
33RIESGO
abrir ↗Referência
CVE-2026-4958
OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorization
28RIESGO
abrir ↗Referência
CVE-2026-4957
OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file
33RIESGO
abrir ↗Referência
CVE-2026-4956
Shenzhen Ruiming Technology Streamax Crocus Parameter DevicePrint.do sql injection
33RIESGO
abrir ↗Referência
CVE-2026-4955
Shenzhen Ruiming Technology Streamax Crocus OperateStatistic.do sql injection
33RIESGO
abrir ↗Referência
CVE-2026-4954
mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection
33RIESGO
abrir ↗Referência
CVE-2026-4953
mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery
33RIESGO
abrir ↗Referência
CVE-2026-4910
Shenzhen Ruiming Technology Streamax Crocus Endpoint RemoteFormat.do sql injection
33RIESGO
abrir ↗Referência
CVE-2010-4997
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Referência
CVE-2026-42785
OpenKM 6.3.12 Remote Code Execution via Administrative Scripting
41RIESGO
abrir ↗Referência
CVE-2026-18723
diaowen DWSurvey Survey Status up-survey-status.do improper authorization
33RIESGO
abrir ↗Referência
CVE-2014-3544
Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before
23RIESGO
abrir ↗Referência
CVE-2026-11581
Kali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field Caption
33RIESGO
abrir ↗Referência
CVE-2014-3631
The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16
23RIESGO
abrir ↗Referência
CVE-2014-5276
Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated u
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.