Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.166exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.078VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2026-58176

CVE-2026-58176HIGH

RuoYi-Vue-Plus - Missing Authorization on Workflow Task Management Endpoints

41RIESGO

abrir ↗

Referência

CVE-2026-13571

CVE-2026-13571MEDIUM

SourceCodester Simple Food Ordering System cart.php logic error

33RIESGO

abrir ↗

Referência

CVE-2026-40523

CVE-2026-40523HIGH

FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php

41RIESGO

abrir ↗

Referência

CVE-2026-9676

CVE-2026-9676MEDIUM

f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification

33RIESGO

abrir ↗

Referência

CVE-2026-10083

CVE-2026-10083HIGH

APCu Manager < 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution

41RIESGO

abrir ↗

Referência

CVE-2026-13540

CVE-2026-13540MEDIUM

GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2017-7043

CVE-2017-7043—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RIESGO

abrir ↗

Referência

CVE-2014-7235

CVE-2014-7235—

htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9,

35RIESGO

abrir ↗

Referência

CVE-2026-87759

CVE-2026-87759HIGH

Add User Autocomplete < 1.2 - Subscriber+ Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2019-7276

CVE-2019-7276—

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.

60RIESGO

abrir ↗

Referência

CVE-2017-11911

CVE-2017-11911—

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

35RIESGO

abrir ↗

Referência

CVE-2018-0707

CVE-2018-0707—

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could

50RIESGO

abrir ↗

Referência

CVE-2019-5736

CVE-2019-5736—

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RIESGO

abrir ↗

Referência

CVE-2018-0823

CVE-2018-0823—

The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege

23RIESGO

abrir ↗

Referência

CVE-2019-6275

CVE-2019-6275—

Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attac

28RIESGO

abrir ↗

Referência

CVE-2019-6545

CVE-2019-6545—

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition)

28RIESGO

abrir ↗

Referência✓ VexDay Proof

ilchClan 1.05g - 'tid' SQL Injection

CVE-2006-0851—webappsphp

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Admbook 1.2.2 - 'x-forwarded-for' Remote Command Execution

CVE-2006-0852—webappsphp

Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute

23RIESGO

abrir ↗

Referência

snapd < 2.37 (Ubuntu) - 'dirty_sock' Local Privilege Escalation (2)

CVE-2019-7304HIGHlocallinux

Local privilege escalation via snapd socket

53RIESGO

abrir ↗

Referência

CVE-2018-25425

CVE-2018-25425HIGH

Yot CMS 3.3.1 SQL Injection via aid and cid Parameters

41RIESGO

abrir ↗

Referência

CVE-2026-9503

CVE-2026-9503MEDIUM

GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference

33RIESGO

abrir ↗

Referência

CVE-2026-9502

CVE-2026-9502MEDIUM

GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-9482

CVE-2026-9482HIGH

Edimax EW-7438RPn formSDHCP stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-10222

CVE-2026-10222MEDIUM

NousResearch hermes-agent config.py _sanitize_env_lines injection

33RIESGO

abrir ↗

Referência

CVE-2026-10226

CVE-2026-10226MEDIUM

raisulislamg4 student_management_system_by_php delete.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10225

CVE-2026-10225MEDIUM

raisulislamg4 student_management_system_by_php Login login_check.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10221

CVE-2026-10221MEDIUM

NousResearch hermes-agent run_agent.py _compress_context injection

33RIESGO

abrir ↗

Referência

CVE-2013-1763

CVE-2013-1763—

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l

23RIESGO

abrir ↗

Referência

CVE-2026-42425

CVE-2026-42425HIGH

OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery

41RIESGO

abrir ↗

Referência

CVE-2026-41917

CVE-2026-41917MEDIUM

OpenKM 6.3.12 Local File Inclusion via Admin Scripting

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.