Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-14630
CVE-2026-14630LOW
ForceInjection AI-fundermentals Memory Recall smart_customer_service.py get_conversation_history weak hash
28RIESGO
abrir ↗
Referência
CVE-2026-12195
CVE-2026-12195HIGH
myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary c
41RIESGO
abrir ↗
Referência
CVE-2018-15884
CVE-2018-15884—
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpMyRealty 2.0.0 - 'location' SQL Injection
CVE-2008-3445—webappsphp
SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
Joomla! Component Saxum Numerology 3.0.4 - SQL Injection
CVE-2018-7177—webappsphp
SQL Injection exists in the Saxum Numerology 3.0.4 component for Joomla! via the publicid parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-112139
CVE-2026-112139MEDIUM
subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
F-PROT AntiVirus 6.2.1.4252 - Malformed Archive Infinite Loop Denial of Service
CVE-2008-3447—dosmultiple
The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop)
23RIESGO
abrir ↗
Referência
CVE-2026-14625
CVE-2026-14625MEDIUM
NousResearch hermes-agent server.py shell.exec protection mechanism
33RIESGO
abrir ↗
Referência
CVE-2024-58352
CVE-2024-58352HIGH
Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do
41RIESGO
abrir ↗
Referência
CVE-2026-11965
CVE-2026-11965MEDIUM
User Registration & Membership < 5.2.0 - Unauthenticated Paid Membership Bypass
33RIESGO
abrir ↗
Referência
CVE-2026-14623
CVE-2026-14623MEDIUM
omec-project amf NGAP Message RRCInactiveTransitionReport denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-14621
CVE-2026-14621LOW
FederatedAI FATE OSX Broker QueuePushReqStreamObserver.java QueuePushReqStreamObserver.initEggroll wrong session
28RIESGO
abrir ↗
Referência
CVE-2026-11781
CVE-2026-11781LOW
Adminify < 4.2.10 - Contributor+ Sensitive Information Disclosure via Global Search AJAX
28RIESGO
abrir ↗
Referência
CVE-2026-120231
CVE-2026-120231CRITICAL
WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-100898
CVE-2026-100898MEDIUM
DevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-120230
CVE-2026-120230CRITICAL
WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-120229
CVE-2026-120229CRITICAL
WAVLINK WN553X1-B ioos sub_416B50 os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-120228
CVE-2026-120228CRITICAL
WAVLINK WN553X1-B ioos Service sub_416D88 os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-11578
CVE-2026-11578LOW
Fluent Forms < 6.2.5 - Form Manager+ Cross-Form Submission Entry Deletion via IDOR
28RIESGO
abrir ↗
Referência
CVE-2026-10077
CVE-2026-10077MEDIUM
YOOtheme Pro < 5.0.35 - Author+ Stored XSS via UIkit Data Attributes
33RIESGO
abrir ↗
Referência
CVE-2026-58593
CVE-2026-58593HIGH
NodeBB - ActivityPub Author Spoofing via Unvalidated attributedTo Mapped to Local User
41RIESGO
abrir ↗
Referência
CVE-2025-10268
CVE-2025-10268MEDIUM
Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal
33RIESGO
abrir ↗
Referência
CVE-2026-13486
CVE-2026-13486MEDIUM
SourceCodester Class and Exam Timetabling System preview6.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5796
CVE-2026-5796MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-13579
CVE-2026-13579MEDIUM
itsourcecode Hospital Management System patientchangepassword.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-12806
CVE-2026-12806HIGH
Edimax BR-6478AC V2 POST Request formWlSiteSurvey buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-10823
CVE-2026-10823HIGH
YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Post Disclosure
56RIESGO
abrir ↗
Referência
CVE-2026-12805
CVE-2026-12805MEDIUM
OFFIS DCMTK ofxml.cc parseFile heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-57522
CVE-2026-57522LOW
Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates
28RIESGO
abrir ↗
Referência
CVE-2017-20263
CVE-2017-20263HIGH
Joomla! FocalPoint Pro Free 1.2.3 SQL Injection via location
41RIESGO
abrir ↗
← anteriorpágina 572 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.