Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.302exploits catalogados
35.469CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.301 exploits
Referência
CVE-2026-7150
CVE-2026-7150MEDIUM
dh1011 auto-favicon MCP Tool server.py generate_favicon_from_url server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-7149
CVE-2026-7149MEDIUM
dexhunter kaggle-mcp server.py prepare_kaggle_dataset path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7148
CVE-2026-7148MEDIUM
CodeAstro Online Classroom addnewfaculty sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7147
CVE-2026-7147MEDIUM
JoeCastrom mcp-chat-studio LLM Models API llm.js server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2019-1003001
CVE-2019-1003001—
A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins
60RIESGO
abrir ↗
Referência
CVE-2014-10020
CVE-2014-10020—
SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência
CVE-2014-10034
CVE-2014-10034—
Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execut
23RIESGO
abrir ↗
Referência
CVE-2026-5634
CVE-2026-5634MEDIUM
projectworlds Car Rental Project Parameter book_car.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5632
CVE-2026-5632MEDIUM
assafelovic gpt-researcher HTTP REST API Endpoint missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-5631
CVE-2026-5631MEDIUM
assafelovic gpt-researcher ws Endpoint server_utils.py extract_command_data code injection
33RIESGO
abrir ↗
Referência
CVE-2026-5630
CVE-2026-5630MEDIUM
assafelovic gpt-researcher Report API app.py cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5629
CVE-2026-5629HIGH
Belkin F9K1015 formSetFirewall stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5628
CVE-2026-5628HIGH
Belkin F9K1015 Setting formSetSystemSettings stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5625
CVE-2026-5625MEDIUM
assafelovic gpt-researcher WebSocket researcher.py cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5621
CVE-2026-5621MEDIUM
ChrisChinchilla Vale-MCP HTTP index.ts os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5620
CVE-2026-5620MEDIUM
itsourcecode Construction Management System Parameter borrowed_equip_report.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5619
CVE-2026-5619MEDIUM
Braffolk mcp-summarization-functions summarize_command mcp-server.ts os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5618
CVE-2026-5618MEDIUM
kalcaddle kodbox shareMake/shareCheck server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-5615
CVE-2026-5615MEDIUM
givanz Vvvebjs File Upload Endpoint upload.php cross site scripting
48RIESGO
abrir ↗
Referência
CVE-2026-5614
CVE-2026-5614HIGH
Belkin F9K1015 formSetPassword stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2014-10034
CVE-2014-10034—
Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execut
23RIESGO
abrir ↗
Referência
CVE-2014-10038
CVE-2014-10038—
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2014-10038
CVE-2014-10038—
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2026-5605
CVE-2026-5605HIGH
Tenda CH22 WrlExtraSet formWrlExtraSet stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5604
CVE-2026-5604HIGH
Tenda CH22 Parameter CertLocalPrecreate formCertLocalPrecreate stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5603
CVE-2026-5603MEDIUM
elgentos magento2-dev-mcp index.ts executeMagerun2Command os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5602
CVE-2026-5602MEDIUM
Nor2-io heim-mcp new_heim_application tools.ts registerTools os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-5601
CVE-2026-5601MEDIUM
Acrel Electrical Prepaid Cloud Platform Backup File bin.rar information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-5597
CVE-2026-5597MEDIUM
griptape-ai griptape ComputerTool tool.py path traversal
33RIESGO
abrir ↗
Referência
CVE-2019-25675
CVE-2019-25675HIGH
eDirectory All Versions SQL Injection Authentication Bypass
41RIESGO
abrir ↗
← anteriorpágina 449 / 744siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.