Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.533exploits catalogados
35.607CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.367 exploits
Referência
CVE-2026-6896
CVE-2026-6896HIGH
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
41RIESGO
abrir ↗
Referência
CVE-2018-6394
CVE-2018-6394—
SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invites action.
23RIESGO
abrir ↗
Referência
CVE-2026-12378
CVE-2026-12378HIGH
BookingPress <= 1.1.28 - Unauthenticated PHP Object Injection
41RIESGO
abrir ↗
Referência
CVE-2026-58583
CVE-2026-58583HIGH
FluxInk Color Management Driver local privilege escalation
41RIESGO
abrir ↗
Referência
CVE-2026-58468
CVE-2026-58468MEDIUM
NocoBase 2.1.20 Server-Side Request Forgery via serverRequest wrapper
33RIESGO
abrir ↗
Referência
CVE-2025-15668
CVE-2025-15668MEDIUM
GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2025-15667
CVE-2025-15667MEDIUM
GPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free
33RIESGO
abrir ↗
Referência
CVE-2026-14713
CVE-2026-14713MEDIUM
SourceCodester Pizzafy E-Commerce System ajax.php confirm_order sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14706
CVE-2026-14706MEDIUM
code-projects Online Examination Quiz Creation Feature update.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2024-58352
CVE-2024-58352HIGH
Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do
41RIESGO
abrir ↗
Referência
CVE-2026-11965
CVE-2026-11965MEDIUM
User Registration & Membership < 5.2.0 - Unauthenticated Paid Membership Bypass
33RIESGO
abrir ↗
Referência
CVE-2026-11781
CVE-2026-11781LOW
Adminify < 4.2.10 - Contributor+ Sensitive Information Disclosure via Global Search AJAX
28RIESGO
abrir ↗
Referência
CVE-2026-11578
CVE-2026-11578LOW
Fluent Forms < 6.2.5 - Form Manager+ Cross-Form Submission Entry Deletion via IDOR
28RIESGO
abrir ↗
Referência
CVE-2026-10077
CVE-2026-10077MEDIUM
YOOtheme Pro < 5.0.35 - Author+ Stored XSS via UIkit Data Attributes
33RIESGO
abrir ↗
Referência
CVE-2026-58593
CVE-2026-58593HIGH
NodeBB - ActivityPub Author Spoofing via Unvalidated attributedTo Mapped to Local User
41RIESGO
abrir ↗
Referência
CVE-2026-58592
CVE-2026-58592HIGH
Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM Integration
41RIESGO
abrir ↗
Referência
CVE-2026-58457
CVE-2026-58457CRITICAL
Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp
48RIESGO
abrir ↗
Referência
CVE-2026-34117
CVE-2026-34117CRITICAL
Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text_to_subtitles.php
48RIESGO
abrir ↗
Referência
CVE-2026-34116
CVE-2026-34116CRITICAL
Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe.php
48RIESGO
abrir ↗
Referência
Joomla! Component Saxum Numerology 3.0.4 - SQL Injection
CVE-2018-7177—webappsphp
SQL Injection exists in the Saxum Numerology 3.0.4 component for Joomla! via the publicid parameter.
23RIESGO
abrir ↗
Referência
Joomla! Component Saxum Picker 3.2.10 - SQL Injection
CVE-2018-7178—webappsphp
SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter.
23RIESGO
abrir ↗
Referência
Joomla! Component SquadManagement 1.0.3 - SQL Injection
CVE-2018-7179—webappsphp
SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-14630
CVE-2026-14630LOW
ForceInjection AI-fundermentals Memory Recall smart_customer_service.py get_conversation_history weak hash
28RIESGO
abrir ↗
Referência
CVE-2026-12195
CVE-2026-12195HIGH
myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary c
41RIESGO
abrir ↗
Referência
CVE-2026-14625
CVE-2026-14625MEDIUM
NousResearch hermes-agent server.py shell.exec protection mechanism
33RIESGO
abrir ↗
Referência
CVE-2026-14623
CVE-2026-14623MEDIUM
omec-project amf NGAP Message RRCInactiveTransitionReport denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-14621
CVE-2026-14621LOW
FederatedAI FATE OSX Broker QueuePushReqStreamObserver.java QueuePushReqStreamObserver.initEggroll wrong session
28RIESGO
abrir ↗
Referência
CVE-2026-12194
CVE-2026-12194LOW
PHPIPAM Authenticated LFI
28RIESGO
abrir ↗
Referência
Joomla! Component Saxum Astro 4.0.14 - SQL Injection
CVE-2018-7180—webappsphp
SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter.
23RIESGO
abrir ↗
Referência
CVE-2018-7841
CVE-2018-7841CRITICALbajo ataque
A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code
100RIESGO
abrir ↗
← anteriorpágina 482 / 746siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.