Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2026-5014

CVE-2026-5014MEDIUM

elecV2 elecV2P Wildcard log path.join path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5013

CVE-2026-5013MEDIUM

elecV2 elecV2P :key path.join path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5012

CVE-2026-5012MEDIUM

elecV2 elecV2P rpc pm2run os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-5011

CVE-2026-5011MEDIUM

elecV2 elecV2P JSON webhook runJSFile code injection

33RIESGO

abrir ↗

Referência

CVE-2026-5007

CVE-2026-5007MEDIUM

kazuph mcp-docs-rag add_git_repository/add_text_file index.ts cloneRepository os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-5004

CVE-2026-5004HIGH

Wavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5003

CVE-2026-5003MEDIUM

PromtEngineer localGPT Web api_server.py handle_index information disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-5002

CVE-2026-5002MEDIUM

PromtEngineer localGPT LLM Prompt server.py _route_using_overviews injection

33RIESGO

abrir ↗

Referência

CVE-2026-5001

CVE-2026-5001MEDIUM

PromtEngineer localGPT server.py do_POST unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-4999

CVE-2026-4999MEDIUM

z-9527 admin isImg Check upload.js uploadFile path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-4998

CVE-2026-4998MEDIUM

Sinaptik AI PandasAI Chat Message code_executor.py CodeExecutor.execute code injection

33RIESGO

abrir ↗

Referência

CVE-2026-4997

CVE-2026-4997MEDIUM

Sinaptik AI PandasAI sql_sanitizer.py is_sql_query_safe path traversal

33RIESGO

abrir ↗

Referência

CVE-2017-20228

CVE-2017-20228HIGH

Flat Assembler 1.71.21 Stack-Based Buffer Overflow ROP

41RIESGO

abrir ↗

Referência

CVE-2018-25225

CVE-2018-25225HIGH

SIPP 3.3 Stack-Based Buffer Overflow via Configuration File

41RIESGO

abrir ↗

Referência

CVE-2018-25224

CVE-2018-25224HIGH

PMS 0.42 Stack-Based Buffer Overflow via Configuration File

41RIESGO

abrir ↗

Referência

CVE-2018-25223

CVE-2018-25223CRITICAL

Crashmail 1.6 Stack-based Buffer Overflow Remote Code Execution

48RIESGO

abrir ↗

Referência

CVE-2018-25222

CVE-2018-25222HIGH

SC v7.16 Stack-Based Buffer Overflow Remote Code Execution

41RIESGO

abrir ↗

Referência

CVE-2018-25221

CVE-2018-25221CRITICAL

EChat Server 3.1 Buffer Overflow via chat.ghp username Parameter

48RIESGO

abrir ↗

Referência

CVE-2018-25220

CVE-2018-25220CRITICAL

Bochs 2.6-5 Buffer Overflow Remote Code Execution

48RIESGO

abrir ↗

Referência

CVE-2017-20229

CVE-2017-20229CRITICAL

MAWK 1.3.3-17 Stack-Based Buffer Overflow

48RIESGO

abrir ↗

Referência✓ VexDay Proof

Crazy Goomba 1.2.1 - 'id' SQL Injection

CVE-2008-1934—webappsphp

SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência

CVE-2015-3245

CVE-2015-3245—

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in t

38RIESGO

abrir ↗

Referência

CVE-2014-10013

CVE-2014-10013—

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2012-5875

CVE-2012-5875—

Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (1

28RIESGO

abrir ↗

Referência

CVE-2018-2636

CVE-2018-2636—

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security).

28RIESGO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure

CVE-2008-2029—webappsphp

Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earli

23RIESGO

abrir ↗

Referência

CVE-2018-6398

CVE-2018-6398—

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action.

23RIESGO

abrir ↗

Referência

CVE-2012-1208

CVE-2012-1208—

Multiple cross-site scripting (XSS) vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other

23RIESGO

abrir ↗

Referência

CVE-2018-6481

CVE-2018-6481—

A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to exe

28RIESGO

abrir ↗

Referência

CVE-2017-0124

CVE-2017-0124—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.