Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.302exploits catalogados

35.469CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.301 exploits

Referência

CVE-2026-7642

CVE-2026-7642MEDIUM

pskill9 website-downloader MCP index.ts download_website os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-6010

CVE-2026-6010MEDIUM

CodeAstro Online Classroom takeassessment2.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6007

CVE-2026-6007MEDIUM

itsourcecode Construction Management System del.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6006

CVE-2026-6006MEDIUM

code-projects Patient Record Management System edit_hpatient.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6005

CVE-2026-6005MEDIUM

code-projects Patient Record Management System hematology_print.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6004

CVE-2026-6004MEDIUM

code-projects Simple IT Discussion Forum delete-category.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2010-4797

CVE-2010-4797—

Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute a

23RIESGO

abrir ↗

Referência

CVE-2026-5992

CVE-2026-5992HIGH

Tenda F451 P2pListFilter fromP2pListFilter stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2018-25293

CVE-2018-25293MEDIUM

Prime95 29.4b7 Denial of Service via Proxy Password Field

33RIESGO

abrir ↗

Referência

CVE-2018-25292

CVE-2018-25292MEDIUM

Bome Restorator 1793 Denial of Service via Buffer Overflow

33RIESGO

abrir ↗

Referência

CVE-2018-25291

CVE-2018-25291MEDIUM

Project64 2.3.2 Denial of Service via Plugin Directory

33RIESGO

abrir ↗

Referência

CVE-2018-25290

CVE-2018-25290MEDIUM

Easyboot 6.6.0 Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2018-25289

CVE-2018-25289MEDIUM

Softdisk 3.0.3 Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2018-25288

CVE-2018-25288MEDIUM

StyleWriter 1.0 Denial of Service via Pattern Input

33RIESGO

abrir ↗

Referência

CVE-2026-5970

CVE-2026-5970MEDIUM

FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection

33RIESGO

abrir ↗

Referência

CVE-2026-5962

CVE-2026-5962MEDIUM

Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5961

CVE-2026-5961MEDIUM

code-projects Simple IT Discussion Forum topic-details.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5960

CVE-2026-5960MEDIUM

code-projects Patient Record Management System SQL Database Backup File hcpms.sql information disclosure

33RIESGO

abrir ↗

Referência

CVE-2016-20055

CVE-2016-20055HIGH

IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2010-4838

CVE-2010-4838—

SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users

23RIESGO

abrir ↗

Referência

CVE-2010-4839

CVE-2010-4839—

SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2010-4843

CVE-2010-4843—

SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2010-4843

CVE-2010-4843—

SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2010-4847

CVE-2010-4847—

SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência

CVE-2018-0971

CVE-2018-0971—

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

23RIESGO

abrir ↗

Referência

CVE-2018-1002007

CVE-2018-1002007—

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RIESGO

abrir ↗

Referência

CVE-2026-6592

CVE-2026-6592MEDIUM

ComfyUI userdata Endpoint user_manager.py getuserdata cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-6589

CVE-2026-6589MEDIUM

ComfyUI server.py create_origin_only_middleware cross-site request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-6588

CVE-2026-6588MEDIUM

serge-chat serge Model API Endpoint model.py delete_model missing authentication

33RIESGO

abrir ↗

Referência

CVE-2026-6586

CVE-2026-6586MEDIUM

TransformerOptimus SuperAGI Budget Endpoint budget.py update_budget authorization

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.