Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.899exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.463 exploits
Referência
CVE-2014-0997
CVE-2014-0997—
WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2 as used i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Google Chrome 0.2.149.27 - Denial of Service
CVE-2008-6995—doswindows
Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a den
23RIESGO
abrir ↗
Referência
CVE-2026-58658
CVE-2026-58658HIGH
GPUStack Unauthenticated Information Disclosure via Worker Endpoints
41RIESGO
abrir ↗
Referência
CVE-2010-4502
CVE-2010-4502—
Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of
23RIESGO
abrir ↗
Referência
CVE-2012-1260
CVE-2012-1260—
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An
23RIESGO
abrir ↗
Referência
CVE-2026-86666
CVE-2026-86666MEDIUM
aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-7750
CVE-2026-7750HIGH
Totolink N300RH POST Request cstecgi.cgi setMacFilterRules buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7749
CVE-2026-7749HIGH
Totolink N300RH POST Request cstecgi.cgi setWanConfig buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7748
CVE-2026-7748HIGH
Totolink N300RH POST Request cstecgi.cgi setUpgradeFW buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7747
CVE-2026-7747CRITICAL
Totolink N300RH Parameter cstecgi.cgi loginauth buffer overflow
48RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component 'com_awesom' 0.3.2 - 'listid' SQL Injection
CVE-2008-0603—webappsphp
SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allows
23RIESGO
abrir ↗
Referência
CVE-2018-12525
CVE-2018-12525—
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /images/ pr
23RIESGO
abrir ↗
Referência
CVE-2014-10038
CVE-2014-10038—
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2018-12584
CVE-2018-12584—
The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows rem
28RIESGO
abrir ↗
Referência
CVE-2026-7214
CVE-2026-7214MEDIUM
eghuzefa engineer-your-data server.py file_inf path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7213
CVE-2026-7213MEDIUM
ef10007 MLOps_MCP save_file Tool fastmcp_server.py path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7212
CVE-2026-7212MEDIUM
edvardlindelof notes-mcp notes_mcp.py path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7211
CVE-2026-7211MEDIUM
dvladimirov MCP Git Search API mcp_server.py GitSearchRequest command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7206
CVE-2026-7206MEDIUM
dubydu sqlite-mcp entry.py extract_to_json sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7205
CVE-2026-7205MEDIUM
duartium papers-mcp-server main.py search_papers path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7204
CVE-2026-7204CRITICAL
Totolink A8000RU CGI cstecgi.cgi setPptpServerCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-7203
CVE-2026-7203CRITICAL
Totolink A8000RU CGI cstecgi.cgi setUrlFilterRules os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-7136
CVE-2026-7136CRITICAL
Totolink A8000RU CGI cstecgi.cgi setDmzCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-7135
CVE-2026-7135MEDIUM
GPAC MP4Box box_code_base.c elng_box_read out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-41467
CVE-2026-41467MEDIUM
ProjeQtor < 12.4.4 Stored XSS via checkValidFileName()
33RIESGO
abrir ↗
Referência
CVE-2026-38651
CVE-2026-38651HIGH
Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0. The VerifyHostToken function in logic/jw
41RIESGO
abrir ↗
Referência
CVE-2026-7202
CVE-2026-7202CRITICAL
Totolink A8000RU CGI cstecgi.cgi setWiFiWpsStart os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-7146
CVE-2026-7146MEDIUM
AlejandroArciniegas mcp-data-vis HTTP Request server.js axios server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-7143
CVE-2026-7143MEDIUM
1000 Projects Portfolio Management System MCA block_status.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7142
CVE-2026-7142MEDIUM
Wooey API Endpoint scripts.py add_or_update_script improper authorization
33RIESGO
abrir ↗
← anteriorpágina 774 / 883siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.