Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.899exploits catalogados

40.763CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.463 exploits

Referência

CVE-2019-25658

CVE-2019-25658MEDIUM

a-Mac Address Change 5.4 Local Buffer Overflow DoS

33RIESGO

abrir ↗

Referência

CVE-2019-25657

CVE-2019-25657MEDIUM

AnyBurn 4.3 x86 Denial of Service via Image Conversion

33RIESGO

abrir ↗

Referência

CVE-2019-25656

CVE-2019-25656HIGH

R i386 3.5.0 Local Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2026-5596

CVE-2026-5596MEDIUM

griptape-ai griptape SqlTool tool.py sql injection

33RIESGO

abrir ↗

Referência

CVE-2018-25256

CVE-2018-25256MEDIUM

IP TOOLS 2.50 Local Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2026-5595

CVE-2026-5595MEDIUM

griptape-ai griptape FileManagerTool save_memory_artifacts_to_disk path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5594

CVE-2026-5594MEDIUM

premAI-io premsql followup.py eval code injection

33RIESGO

abrir ↗

Referência

CVE-2026-5587

CVE-2026-5587MEDIUM

wbbeyourself MAC-SQL Refiner Agent agents.py _execute_sql sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5586

CVE-2026-5586MEDIUM

zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5564

CVE-2026-5564MEDIUM

code-projects Simple Laundry System Parameter searchguest.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5563

CVE-2026-5563MEDIUM

AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5562

CVE-2026-5562MEDIUM

provectus kafka-ui Endpoint testexecutions validateAccess code injection

48RIESGO

abrir ↗

Referência

CVE-2026-5561

CVE-2026-5561MEDIUM

Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection

33RIESGO

abrir ↗

Referência

CVE-2026-5560

CVE-2026-5560MEDIUM

PHPGurukul Online Shopping Portal Project Parameter payment-method.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2014-3978

CVE-2014-3978—

SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2026-6574

CVE-2026-6574MEDIUM

osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials

33RIESGO

abrir ↗

Referência

CVE-2026-6562

CVE-2026-6562MEDIUM

dameng100 muucmf index.html getListByPage sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-6561

CVE-2026-6561MEDIUM

EyouCMS Index.php edit_adminlogo unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-6560

CVE-2026-6560HIGH

H3C Magic B0 aspForm Edit_BasicSSID buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5668

CVE-2026-5668MEDIUM

Cyber-III Student-Management-System add%20notice.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5811

CVE-2026-5811MEDIUM

SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error

33RIESGO

abrir ↗

Referência

CVE-2026-5810

CVE-2026-5810MEDIUM

SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2014-4113

CVE-2014-4113HIGHbajo ataque

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RIESGO

abrir ↗

Referência

CVE-2026-4973

CVE-2026-4973MEDIUM

SourceCodester Online Quiz System add-question.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-4972

CVE-2026-4972MEDIUM

code-projects Online Reviewer System btn_functions.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-4971

CVE-2026-4971MEDIUM

SourceCodester Note Taking App cross-site request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-4970

CVE-2026-4970MEDIUM

code-projects Social Networking Site Endpoint delete_photos.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-4969

CVE-2026-4969MEDIUM

code-projects Social Networking Site Alert home.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-4968

CVE-2026-4968MEDIUM

SourceCodester Diary App diary.php cross-site request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-4966

CVE-2026-4966MEDIUM

itsourcecode Free Hotel Reservation System index.php sql injection

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.