Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.302exploits catalogados
35.469CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.301 exploits
Referência
CVE-2026-10176
CVE-2026-10176MEDIUM
Aider-AI Aider Code Generation Workflow sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-10157
CVE-2026-10157MEDIUM
Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-10156
CVE-2026-10156MEDIUM
Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption
33RIESGO
abrir ↗
Referência
CVE-2026-10155
CVE-2026-10155MEDIUM
Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-10153
CVE-2026-10153MEDIUM
westboy CicadasCMS AbstractCacheManager.java search cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2019-0796
CVE-2019-0796—
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak
23RIESGO
abrir ↗
Referência
CVE-2026-9471
CVE-2026-9471MEDIUM
yashpokharna2555 StudentManagementSystem student.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-9470
CVE-2026-9470MEDIUM
yashpokharna2555 StudentManagementSystem student_trans.php confirm_logged_in sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9469
CVE-2026-9469MEDIUM
yashpokharna2555 StudentManagementSystem success.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9467
CVE-2026-9467MEDIUM
debugmcp mcp-debugger server.ts handleGetSourceContext path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-9466
CVE-2026-9466MEDIUM
Tiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery
33RIESGO
abrir ↗
Referência
Titan FTP Server Version 2019 Build 3505 - Directory Traversal / Local File Inclusion
CVE-2019-10009—webappswindows
A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated use
28RIESGO
abrir ↗
Referência
CVE-2026-8349
CVE-2026-8349MEDIUM
omec-project amf NGAP Message memory corruption
33RIESGO
abrir ↗
Referência
CVE-2026-8291
CVE-2026-8291MEDIUM
Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-9361
CVE-2026-9361MEDIUM
Edimax EW-7438RPn POST Request formAccep formAccept command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8253
CVE-2026-8253MEDIUM
Devs Palace ERP Online purchase_save cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-8252
CVE-2026-8252MEDIUM
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference
33RIESGO
abrir ↗
Referência
CVE-2026-8248
CVE-2026-8248MEDIUM
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
33RIESGO
abrir ↗
Referência
CVE-2021-47953
CVE-2021-47953MEDIUM
OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password
33RIESGO
abrir ↗
Referência
CVE-2021-47951
CVE-2021-47951MEDIUM
WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL
33RIESGO
abrir ↗
Referência
CVE-2021-47950
CVE-2021-47950MEDIUM
Advanced Guestbook 2.4.4 Persistent XSS via Smilies
33RIESGO
abrir ↗
Referência
CVE-2021-47949
CVE-2021-47949HIGH
CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack
41RIESGO
abrir ↗
Referência
CVE-2021-47948
CVE-2021-47948MEDIUM
WordPress GetPaid Plugin 2.4.6 HTML Injection via Help Text
33RIESGO
abrir ↗
Referência
CVE-2021-47947
CVE-2021-47947MEDIUM
Projectsend r1295 Stored Cross-Site Scripting via files-edit.php
33RIESGO
abrir ↗
Referência
CVE-2021-47946
CVE-2021-47946MEDIUM
OpenCart 3.0.3.6 Account Takeover via Cross Site Request Forgery
33RIESGO
abrir ↗
Referência
CVE-2021-47945
CVE-2021-47945HIGH
Argus Surveillance DVR 4.0 Unquoted Service Path Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2021-47938
CVE-2021-47938HIGH
ImpressCMS 1.4.2 Remote Code Execution via Autotasks
41RIESGO
abrir ↗
Referência
CVE-2021-47937
CVE-2021-47937HIGH
e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme Upload
41RIESGO
abrir ↗
Referência
CVE-2026-9356
CVE-2026-9356MEDIUM
SourceCodester Hospitals Patient Records Management System manage_history.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9350
CVE-2026-9350MEDIUM
NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization
33RIESGO
abrir ↗
← anteriorpágina 440 / 744siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.