Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.894exploits catalogados

40.389CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.190Exploit-DB 24.488GitHub PoC 18.015VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.190 exploits

Referência

CVE-2019-25664

CVE-2019-25664HIGH

SuiteCRM 7.10.7 SQL Injection via record Parameter

41RIESGO

abrir ↗

Referência

CVE-2019-25663

CVE-2019-25663HIGH

SuiteCRM 7.10.7 SQL Injection via parentTab Parameter

41RIESGO

abrir ↗

Referência

CVE-2019-25662

CVE-2019-25662HIGH

ResourceSpace 8.6 SQL Injection via watched_searches.php

41RIESGO

abrir ↗

Referência

CVE-2019-25661

CVE-2019-25661MEDIUM

Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS

33RIESGO

abrir ↗

Referência

CVE-2019-25660

CVE-2019-25660MEDIUM

LanHelper 1.74 Denial of Service via Buffer Overflow

33RIESGO

abrir ↗

Referência

CVE-2019-25659

CVE-2019-25659MEDIUM

ASPRunner Professional 6.0.766 Local Buffer Overflow DoS

33RIESGO

abrir ↗

Referência

CVE-2019-25658

CVE-2019-25658MEDIUM

a-Mac Address Change 5.4 Local Buffer Overflow DoS

33RIESGO

abrir ↗

Referência

CVE-2019-25657

CVE-2019-25657MEDIUM

AnyBurn 4.3 x86 Denial of Service via Image Conversion

33RIESGO

abrir ↗

Referência

CVE-2019-25656

CVE-2019-25656HIGH

R i386 3.5.0 Local Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2026-5596

CVE-2026-5596MEDIUM

griptape-ai griptape SqlTool tool.py sql injection

33RIESGO

abrir ↗

Referência

CVE-2018-25256

CVE-2018-25256MEDIUM

IP TOOLS 2.50 Local Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2026-5595

CVE-2026-5595MEDIUM

griptape-ai griptape FileManagerTool save_memory_artifacts_to_disk path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5594

CVE-2026-5594MEDIUM

premAI-io premsql followup.py eval code injection

33RIESGO

abrir ↗

Referência

CVE-2026-5587

CVE-2026-5587MEDIUM

wbbeyourself MAC-SQL Refiner Agent agents.py _execute_sql sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5586

CVE-2026-5586MEDIUM

zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5564

CVE-2026-5564MEDIUM

code-projects Simple Laundry System Parameter searchguest.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5563

CVE-2026-5563MEDIUM

AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5562

CVE-2026-5562MEDIUM

provectus kafka-ui Endpoint testexecutions validateAccess code injection

48RIESGO

abrir ↗

Referência

CVE-2026-5561

CVE-2026-5561MEDIUM

Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection

33RIESGO

abrir ↗

Referência

CVE-2026-5560

CVE-2026-5560MEDIUM

PHPGurukul Online Shopping Portal Project Parameter payment-method.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6574

CVE-2026-6574MEDIUM

osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials

33RIESGO

abrir ↗

Referência

CVE-2026-6562

CVE-2026-6562MEDIUM

dameng100 muucmf index.html getListByPage sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6561

CVE-2026-6561MEDIUM

EyouCMS Index.php edit_adminlogo unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-6560

CVE-2026-6560HIGH

H3C Magic B0 aspForm Edit_BasicSSID buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5668

CVE-2026-5668MEDIUM

Cyber-III Student-Management-System add%20notice.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5811

CVE-2026-5811MEDIUM

SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error

33RIESGO

abrir ↗

Referência

CVE-2026-5810

CVE-2026-5810MEDIUM

SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2010-4983

CVE-2010-4983—

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência

CVE-2026-14686

CVE-2026-14686MEDIUM

HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparison

33RIESGO

abrir ↗

Referência

CVE-2014-4872

CVE-2014-4872—

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbit

60RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.