Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.634exploits catalogados

40.286CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.110Exploit-DB 24.488GitHub PoC 17.941VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientes populares riesgo

26.110 exploits

Referência

CVE-2026-7315

CVE-2026-7315MEDIUM

eiceblue spire-pdf-mcp-server PDF File server.py get_pdf_path path traversal

33RIESGO

abrir ↗

Referência

CVE-2016-2386

CVE-2016-2386CRITICALbajo ataque

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi

100RIESGO

abrir ↗

Referência

CVE-2026-18395

CVE-2026-18395MEDIUM

Child Pages Card < 1.09 - Contributor+ Stored XSS via Shortcode Attributes

33RIESGO

abrir ↗

Referência

CVE-2010-4144

CVE-2010-4144—

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL comman

23RIESGO

abrir ↗

Referência

CVE-2026-10875

CVE-2026-10875MEDIUM

projectworlds Online Art Gallery Shop Project adminHome.ph sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10874

CVE-2026-10874MEDIUM

projectworlds Online Art Gallery Shop Project adminHome.php sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

HP Software Update Client 3.0.8.4 - Multiple Vulnerabilities

CVE-2007-6506—doswindows

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlie

28RIESGO

abrir ↗

Referência

CVE-2009-4661

CVE-2009-4661—

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial o

23RIESGO

abrir ↗

Referência

CVE-2010-3404

CVE-2010-3404—

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência

CVE-2016-3716

CVE-2016-3716—

The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via

28RIESGO

abrir ↗

Referência

CVE-2026-16255

CVE-2026-16255MEDIUM

Incorrect Authorization in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-18787

CVE-2026-18787HIGH

GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection

41RIESGO

abrir ↗

Referência

CVE-2026-92796

CVE-2026-92796HIGH

Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass

41RIESGO

abrir ↗

Referência

CVE-2010-3467

CVE-2010-3467—

SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial modul

23RIESGO

abrir ↗

Referência

CVE-2010-4249

CVE-2010-4249—

The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properl

23RIESGO

abrir ↗

Referência

CVE-2026-19845

CVE-2026-19845HIGH

TOTOLINK A800R lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2011-5110

CVE-2011-5110—

Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência

CVE-2026-32847

CVE-2026-32847HIGH

DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py

21RIESGO

abrir ↗

Referência

CVE-2026-86514

CVE-2026-86514MEDIUM

vgmstream txth-txtp txth.c sscanf stack-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-103515

CVE-2026-103515LOW

Incorrect Authorization in GitLab

28RIESGO

abrir ↗

Referência

CVE-2009-3362

CVE-2009-3362—

PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP

23RIESGO

abrir ↗

Referência

CVE-2026-16955

CVE-2026-16955MEDIUM

AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription

33RIESGO

abrir ↗

Referência

CVE-2010-3486

CVE-2010-3486—

Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbi

23RIESGO

abrir ↗

Referência

CVE-2018-0748

CVE-2018-0748—

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and

23RIESGO

abrir ↗

Referência

CVE-2021-47978

CVE-2021-47978MEDIUM

ProcessMaker 3.5.4 Local File Inclusion via Path Traversal

33RIESGO

abrir ↗

Referência

CVE-2026-11366

CVE-2026-11366LOW

MonsterInsights < 11.1.0 - Unauthenticated Measurement Protocol Secret Update via Empty-Key HMAC Bypass

28RIESGO

abrir ↗

Referência

CVE-2010-4981

CVE-2010-4981—

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2026-9408

CVE-2026-9408CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injection

48RIESGO

abrir ↗

Referência

CVE-2017-18357

CVE-2017-18357—

Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of t

43RIESGO

abrir ↗

Referência✓ VexDay Proof

GuppY 4.6.3 - 'index.php?selskin' Remote File Inclusion

CVE-2007-5845—webappsphp

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include an

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.