Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2026-10262

CVE-2026-10262MEDIUM

code-projects Real State Services Login loginuser.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2018-25345

CVE-2018-25345HIGH

10-Strike Network Scanner 3.0 Local Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2026-10261

CVE-2026-10261MEDIUM

CodeAstro Online Job Portal application_status.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2015-7611

CVE-2015-7611—

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary syst

50RIESGO

abrir ↗

Referência

CVE-2026-10202

CVE-2026-10202MEDIUM

OFCMS JSON Query SystemDictController.java query sql injection

33RIESGO

abrir ↗

Referência

CVE-2018-25349

CVE-2018-25349MEDIUM

userSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header

33RIESGO

abrir ↗

Referência

CVE-2026-10201

CVE-2026-10201MEDIUM

Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero

33RIESGO

abrir ↗

Referência

CVE-2026-10200

CVE-2026-10200MEDIUM

Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-10199

CVE-2026-10199MEDIUM

Assimp glTF2Asset.h LazyDict null pointer dereference

33RIESGO

abrir ↗

Referência

CVE-2019-3929

CVE-2019-3929CRITICALbajo ataque

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba

100RIESGO

abrir ↗

Referência

CVE-2026-10171

CVE-2026-10171MEDIUM

code-projects Online Music Site AdminUpdateAlbum.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-76800

CVE-2026-76800MEDIUM

DeDeCMS select_media_post.php unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2017-20247

CVE-2017-20247HIGH

WordPress Plugin PICA Photo Gallery 1.0 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2026-49494

CVE-2026-49494HIGH

Xcitium Client Security / Comodo Internet Security Remote Denial of Service

41RIESGO

abrir ↗

Referência

CVE-2026-10170

CVE-2026-10170MEDIUM

code-projects Visitor Management System phone_0.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11459

CVE-2026-11459MEDIUM

SecureAge CatchPulse IOCTL saappctl.sys information disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-12131

CVE-2026-12131MEDIUM

CodeAstro Human Resource Management System Payroll Invoice Payroll.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2017-20246

CVE-2017-20246HIGH

KittyCatfish 2.2 Plugin for WordPress SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2026-11459

CVE-2026-11459MEDIUM

SecureAge CatchPulse IOCTL saappctl.sys information disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-11458

CVE-2026-11458MEDIUM

erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure

33RIESGO

abrir ↗

Referência

CVE-2014-1677

CVE-2014-1677—

Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.

28RIESGO

abrir ↗

Referência

CVE-2017-20245

CVE-2017-20245HIGH

Wow Viral Signups 2.1 WordPress Plugin SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2015-7857

CVE-2015-7857—

SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.p

60RIESGO

abrir ↗

Referência

CVE-2026-12782

CVE-2026-12782HIGH

EaseUS Partition Master Kernel Driver EUEDKEPM.sys access control

41RIESGO

abrir ↗

Referência

CVE-2026-10168

CVE-2026-10168MEDIUM

OUSL-GROUP-BrinaryBrains School Student Management System Parents.php marks resource injection

33RIESGO

abrir ↗

Referência

CVE-2017-20244

CVE-2017-20244HIGH

Wow Forms WordPress Plugin 2.1 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2017-20243

CVE-2017-20243HIGH

WordPress Car Park Booking Plugin SQL Injection via space_id

41RIESGO

abrir ↗

Referência

CVE-2026-10167

CVE-2026-10167MEDIUM

OUSL-GROUP-BrinaryBrains School Student Management System MY_Controller Login.php sign_auth_cookie improper authentication

33RIESGO

abrir ↗

Referência

CVE-2026-67609

CVE-2026-67609HIGH

Telenia TVox 26.5.3 Privilege Escalation via Insecure sudoers Configuration

41RIESGO

abrir ↗

Referência

CVE-2016-8855

CVE-2016-8855—

Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.