Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.112exploits catalogados
40.548CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.072VulnCheck XDB 10.121Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-19973
CVE-2026-19973MEDIUM
itsourcecode Hospital Management System viewpaymentreport.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-75130
CVE-2026-75130MEDIUM
Context7 2.1.2 Prompt Injection via Custom AI Instructions
33RIESGO
abrir ↗
Referência
CVE-2026-19964
CVE-2026-19964MEDIUM
Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection
33RIESGO
abrir ↗
Referência
CVE-2026-18781
CVE-2026-18781HIGH
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass
41RIESGO
abrir ↗
Referência
CVE-2026-14601
CVE-2026-14601MEDIUM
Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-76988
CVE-2026-76988MEDIUM
liftoff-sr CIPster ForwardOpen cipconnectionmanager.cc forward_open out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2018-18799
CVE-2018-18799—
School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.
23RIESGO
abrir ↗
Referência
CVE-2026-76987
CVE-2026-76987MEDIUM
liftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption
33RIESGO
abrir ↗
Referência
CVE-2026-19972
CVE-2026-19972MEDIUM
itsourcecode Hospital Management System viewpatient.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-16058
CVE-2026-16058MEDIUM
YayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration
33RIESGO
abrir ↗
Referência
CVE-2019-16759
CVE-2019-16759CRITICALbajo ataque
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge
100RIESGO
abrir ↗
Referência
CVE-2026-12979
CVE-2026-12979MEDIUM
FunnelKit < 3.15.0.6 - Admin+ Arbitrary File Deletion via Path Traversal in Template Importer
33RIESGO
abrir ↗
Referência
CVE-2026-18785
CVE-2026-18785MEDIUM
o6 open62541 client_types_custom.c UA_Client_getRemoteDataTypes use after free
33RIESGO
abrir ↗
Referência
CVE-2026-18773
CVE-2026-18773MEDIUM
NousResearch hermes-agent Quick run.py _check_slash_access authorization
33RIESGO
abrir ↗
Referência
CVE-2026-67199
CVE-2026-67199HIGH
Perspective 5.0.0 DoS via Loop Expression Evaluation
41RIESGO
abrir ↗
Referência
CVE-2026-67198
CVE-2026-67198HIGH
Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher
41RIESGO
abrir ↗
Referência
CVE-2026-67196
CVE-2026-67196MEDIUM
Perspective 5.0.0 XSS via Debug Plugin innerHTML Interpolation
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component 'com_newsletter' 4.5 - 'listid' SQL Injection
CVE-2008-0510—webappsphp
SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component 'com_mamml' - 'listid' SQL Injection
CVE-2008-0511—webappsphp
SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla! allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2017-17586
CVE-2017-17586—
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-15967
CVE-2017-15967—
Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the e
23RIESGO
abrir ↗
Referência
CVE-2017-6736
CVE-2017-6736HIGHbajo ataque
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabiliti
93RIESGO
abrir ↗
Referência
CVE-2017-6996
CVE-2017-6996—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Photo Cart 3.9 - 'adminprint.php' Remote File Inclusion
CVE-2006-6093—webappsphp
Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attacker
23RIESGO
abrir ↗
Referência
CVE-2026-16292
CVE-2026-16292MEDIUM
Frontend File Manager Plugin <= 23.6 - File Metadata Update via CSRF
33RIESGO
abrir ↗
Referência
CVE-2026-13604
CVE-2026-13604MEDIUM
Pixelavo < 1.5.4 - Unauthenticated Facebook CAPI Event Injection via pixelavo_event AJAX
33RIESGO
abrir ↗
Referência
CVE-2026-82689
CVE-2026-82689CRITICAL
D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-82679
CVE-2026-82679MEDIUM
diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2017-15969
CVE-2017-15969—
PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_cata
23RIESGO
abrir ↗
Referência
CVE-2017-6997
CVE-2017-6997—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RIESGO
abrir ↗
← anteriorpágina 486 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.