Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.166exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.078VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2026-9301

CVE-2026-9301MEDIUM

omec-project amf NGReset Message memory corruption

33RIESGO

abrir ↗

Referência

CVE-2026-9300

CVE-2026-9300MEDIUM

omec-project amf NGSetupRequest memory corruption

33RIESGO

abrir ↗

Referência

CVE-2026-58372

CVE-2026-58372HIGH

SeaweedFS < 4.34 - Cross-Bucket Object Deletion via DeleteObjects Request-Body Keys

41RIESGO

abrir ↗

Referência

CVE-2026-34100

CVE-2026-34100HIGH

Guardian Language-System SQL Injection via id Parameter in media.php

41RIESGO

abrir ↗

Referência

CVE-2026-14695

CVE-2026-14695MEDIUM

SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14694

CVE-2026-14694MEDIUM

SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13572

CVE-2026-13572MEDIUM

itsourcecode Hospital Management System insertbillingrecord.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14606

CVE-2026-14606HIGH

RT-Thread SWM341 CAN SWM341.h CAN_Receive stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2010-2135

CVE-2010-2135—

Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execu

23RIESGO

abrir ↗

Referência

CVE-2010-2141

CVE-2010-2141—

SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2026-14693

CVE-2026-14693MEDIUM

SourceCodester Multi-Vendor Online Grocery Management System Master.php cancel_order improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-56789

CVE-2026-56789HIGH

RTKLIB 2.4.3 - Heap Buffer Overflow and Stack Read via Oversized RINEX Epoch Satellite Count

41RIESGO

abrir ↗

Referência

CVE-2019-25734

CVE-2019-25734MEDIUM

Contact Form by WD 1.13.1 CSRF to Local File Inclusion

33RIESGO

abrir ↗

Referência

CVE-2026-15672

CVE-2026-15672MEDIUM

itsourcecode Electronic Judging System add_judges.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2017-20264

CVE-2017-20264HIGH

Joomla! Component Sponsor Wall 8.0 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2026-10298

CVE-2026-10298MEDIUM

ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereference

33RIESGO

abrir ↗

Referência

CVE-2026-56787

CVE-2026-56787MEDIUM

RTKLIB 2.4.3 - Off-by-One Out-of-Bounds Read in decode_ssr3 via RTCM3 SSR Message

33RIESGO

abrir ↗

Referência

CVE-2021-47931

CVE-2021-47931MEDIUM

Exponent CMS 2.6 Multiple Vulnerabilities Stored XSS Authentication

33RIESGO

abrir ↗

Referência

CVE-2022-1175

CVE-2022-1175HIGH

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befor

63RIESGO

abrir ↗

Referência

CVE-2026-15669

CVE-2026-15669MEDIUM

louisho5 picobot exec Tool exec.go ExecTool.Execute os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-10300

CVE-2026-10300MEDIUM

SGLang Inference HTTP Endpoint lora_manager.py assertion

33RIESGO

abrir ↗

Referência

CVE-2016-6256

CVE-2016-6256—

SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML

23RIESGO

abrir ↗

Referência

CVE-2010-2846

CVE-2010-2846—

Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! al

23RIESGO

abrir ↗

Referência

CVE-2016-6256

CVE-2016-6256—

SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML

23RIESGO

abrir ↗

Referência

CVE-2026-10198

CVE-2026-10198MEDIUM

Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference

33RIESGO

abrir ↗

Referência

CVE-2018-16517

CVE-2018-16517—

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a deni

23RIESGO

abrir ↗

Referência

CVE-2026-6063

CVE-2026-6063MEDIUM

Authorization Bypass Through User-Controlled Key in GitLab

33RIESGO

abrir ↗

Referência

CVE-2020-37250

CVE-2020-37250HIGH

TFTP Broadband 4.3.0.1465 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2010-2847

CVE-2010-2847—

Multiple SQL injection vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allo

23RIESGO

abrir ↗

Referência

CVE-2026-10197

CVE-2026-10197MEDIUM

Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.