Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.899exploits catalogados

40.763CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.463 exploits

Referência

CVE-2026-12196

CVE-2026-12196HIGH

HestiaCP Admin Takeover

41RIESGO

abrir ↗

Referência

CVE-2026-14626

CVE-2026-14626MEDIUM

NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of service

33RIESGO

abrir ↗

Referência

CVE-2010-1947

CVE-2010-1947—

Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enable

23RIESGO

abrir ↗

Referência

CVE-2026-14624

CVE-2026-14624MEDIUM

omec-project amf NGSetupRequest handler.go denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-34109

CVE-2026-34109CRITICAL

Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech.php

48RIESGO

abrir ↗

Referência

CVE-2018-15884

CVE-2018-15884—

RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-14761

CVE-2026-14761MEDIUM

radareorg radare2 str.c r_str_append integer overflow

33RIESGO

abrir ↗

Referência

CVE-2014-5112

CVE-2014-5112—

maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacha

23RIESGO

abrir ↗

Referência

CVE-2018-16133

CVE-2018-16133—

Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.

50RIESGO

abrir ↗

Referência

CVE-2026-13562

CVE-2026-13562HIGH

Edimax EW-7478APC POST Request formiNICSiteSurvey buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2018-25328

CVE-2018-25328HIGH

VX Search 10.6.18 Local Buffer Overflow via Directory Field

41RIESGO

abrir ↗

Referência

CVE-2014-3220

CVE-2014-3220—

F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary u

28RIESGO

abrir ↗

Referência

CVE-2026-13548

CVE-2026-13548MEDIUM

itsourcecode Hospital Management System doctortimings.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2014-3434

CVE-2014-3434—

Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,

23RIESGO

abrir ↗

Referência

CVE-2014-3544

CVE-2014-3544—

Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before

23RIESGO

abrir ↗

Referência

CVE-2014-5276

CVE-2014-5276—

Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated u

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Globsy 1.0 - 'file' Remote File Disclosure

CVE-2008-0905—webappsphp

Directory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via a

23RIESGO

abrir ↗

Referência

CVE-2026-11581

CVE-2026-11581MEDIUM

Kali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field Caption

33RIESGO

abrir ↗

Referência

CVE-2014-3631

CVE-2014-3631—

The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16

23RIESGO

abrir ↗

Referência

CVE-2016-7255

CVE-2016-7255HIGHbajo ataqueransomware

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,

93RIESGO

abrir ↗

Referência

CVE-2018-11646

CVE-2018-11646—

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFavicon

50RIESGO

abrir ↗

Referência

CVE-2026-8086

CVE-2026-8086MEDIUM

OSGeo gdal SWapi.c SWnentries heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-8084

CVE-2026-8084MEDIUM

OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds

33RIESGO

abrir ↗

Referência

CVE-2026-13534

CVE-2026-13534LOW

CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization

28RIESGO

abrir ↗

Referência

CVE-2026-8084

CVE-2026-8084MEDIUM

OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds

33RIESGO

abrir ↗

Referência

CVE-2026-42284

CVE-2026-42284HIGH

GitPython: Unsafe option check validates multi_options before shlex.split transforms it

41RIESGO

abrir ↗

Referência

CVE-2026-8083

CVE-2026-8083MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php save_user sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module Docum - 'artid' SQL Injection

CVE-2008-0906—webappsphp

SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência

CVE-2022-1175

CVE-2022-1175HIGH

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befor

63RIESGO

abrir ↗

Referência

CVE-2026-56789

CVE-2026-56789HIGH

RTKLIB 2.4.3 - Heap Buffer Overflow and Stack Read via Oversized RINEX Epoch Satellite Count

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.