Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.449exploits catalogados
35.552CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.332 exploits
Referência
CVE-2026-7599
CVE-2026-7599MEDIUM
Dayoooun hwpx-mcp MCP index.ts export_to_html path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7597
CVE-2026-7597MEDIUM
mem0ai mem0 faiss.py pickle.dump deserialization
33RIESGO
abrir ↗
Referência
CVE-2026-7596
CVE-2026-7596MEDIUM
nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-7595
CVE-2026-7595MEDIUM
nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection
33RIESGO
abrir ↗
Referência
CVE-2026-7594
CVE-2026-7594MEDIUM
Flux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7593
CVE-2026-7593MEDIUM
Sunwood-ai-labs command-executor-mcp-server MCP index.ts execute_command os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7592
CVE-2026-7592MEDIUM
itsourcecode Courier Management System edit_staff.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7591
CVE-2026-7591MEDIUM
TimBroddin astro-mcp-server MCP Tool Query Construction index.ts sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7590
CVE-2026-7590MEDIUM
eyal-gor p_69_branch_monkey_mcp Preview Endpoint advanced.py os command injection
33RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2026-7588
CVE-2026-7588MEDIUM
ggerve coding-standards-mcp server.py get_best_practices path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7587
CVE-2026-7587MEDIUM
Open5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-7586
CVE-2026-7586MEDIUM
Open5GS AMF nudm-handler.c ogs_id_get_value denial of service
33RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2026-7554
CVE-2026-7554MEDIUM
D-Link M60 httpd password recovery
33RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2015-1478
CVE-2015-1478—
Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attac
23RIESGO
abrir ↗
Referência
CVE-2015-1481
CVE-2015-1481—
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a s
23RIESGO
abrir ↗
Referência
CVE-2015-1515
CVE-2015-1515—
The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write data to arbitrary memo
23RIESGO
abrir ↗
Referência
CVE-2020-0618
CVE-2020-0618CRITICALbajo ataqueransomware
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page
100RIESGO
abrir ↗
Referência
CVE-2017-12617
CVE-2017-12617HIGHbajo ataque
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT
100RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Spider Friendly Module 1.3.10 - Remote File Inclusion
CVE-2006-5665—webappsphp
PHP remote file inclusion vulnerability in admin/modules_data.php in the phpBB module Spider Friendly 1.3.10 and earlier
23RIESGO
abrir ↗
Referência✓ VexDay Proof
E Annu 1.0 - Authentication Bypass / SQL Injection
CVE-2006-5666—webappsphp
SQL injection vulnerability in includes/menu.inc.php in E-Annu 1.0 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
GEPI 1.4.0 - '/gestion/savebackup.php' Remote File Inclusion
CVE-2006-5669—webappsphp
PHP remote file inclusion vulnerability in gestion/savebackup.php in Gepi 1.4.0 and earlier, and possibly other versions
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Free Image Hosting 1.0 - 'forgot_pass.php' File Inclusion
CVE-2006-5670—webappsphp
PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and earlier allows remote attackers
23RIESGO
abrir ↗
← anteriorpágina 459 / 745siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.