Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2026-41466

CVE-2026-41466MEDIUM

ProjeQtor < 12.4.4 Stored XSS via checkValidHtmlText()

33RIESGO

abrir ↗

Referência

CVE-2026-15526

CVE-2026-15526MEDIUM

augmnt augments-mcp-server scan_project_deps scan-project-deps.ts scanProjectDeps path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-15478

CVE-2026-15478MEDIUM

IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5741

CVE-2026-5741MEDIUM

suvarchal docker-mcp-server HTTP index.ts pull_image os command injection

33RIESGO

abrir ↗

Referência

CVE-2018-25287

CVE-2018-25287MEDIUM

Drive Power Manager 1.10 Denial of Service via Name Field

33RIESGO

abrir ↗

Referência

CVE-2026-5802

CVE-2026-5802MEDIUM

idachev mcp-javadc HTTP os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-4338

CVE-2026-4338HIGH

ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure

41RIESGO

abrir ↗

Referência

CVE-2018-25286

CVE-2018-25286MEDIUM

Easy PhotoResQ 1.0 Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2018-25285

CVE-2018-25285MEDIUM

Fathom 2.4 Denial of Service via Authorization Code Buffer Overflow

33RIESGO

abrir ↗

Referência

CVE-2018-25284

CVE-2018-25284MEDIUM

HD Tune Pro 5.70 Denial of Service via Options Dialog

33RIESGO

abrir ↗

Referência

CVE-2018-25283

CVE-2018-25283HIGH

iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter

41RIESGO

abrir ↗

Referência

CVE-2018-25282

CVE-2018-25282MEDIUM

Nmap 7.70 Denial of Service via XML Entity Expansion

33RIESGO

abrir ↗

Referência

CVE-2018-25281

CVE-2018-25281MEDIUM

iCash 7.6.5 Denial of Service via Connect to Server

33RIESGO

abrir ↗

Referência

CVE-2018-25280

CVE-2018-25280MEDIUM

Infiltrator Network Security Scanner 4.6 Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2018-25279

CVE-2018-25279MEDIUM

jiNa OCR Image to Text 1.0 Denial of Service via PNG

33RIESGO

abrir ↗

Referência

CVE-2018-25278

CVE-2018-25278MEDIUM

PicaJet FX 2.6.5 Denial of Service via Registration Fields

33RIESGO

abrir ↗

Referência

CVE-2026-5806

CVE-2026-5806MEDIUM

code-projects Easy Blog Site update.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5805

CVE-2026-5805MEDIUM

code-projects Easy Blog Site contact_us.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5803

CVE-2026-5803MEDIUM

bigsk1 openai-realtime-ui API Proxy Endpoint server.js server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2010-0723

CVE-2010-0723—

SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência

CVE-2014-3978

CVE-2014-3978—

SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2014-4113

CVE-2014-4113HIGHbajo ataque

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RIESGO

abrir ↗

Referência

CVE-2021-45783

CVE-2021-45783—

Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to

23RIESGO

abrir ↗

Referência

CVE-2026-5611

CVE-2026-5611HIGH

Belkin F9K1015 formCrossBandSwitch stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5610

CVE-2026-5610HIGH

Belkin F9K1015 formWISP5G stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5609

CVE-2026-5609HIGH

Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5608

CVE-2026-5608HIGH

Belkin F9K1122 formWlanSetup stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5607

CVE-2026-5607MEDIUM

imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2019-25692

CVE-2019-25692HIGH

Kados R10 GreenBee SQL Injection via id_to_modify Parameter

41RIESGO

abrir ↗

Referência

CVE-2019-25690

CVE-2019-25690HIGH

Kados R10 GreenBee SQL Injection via mng_profile_id

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.