Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2026-63096

CVE-2026-63096MEDIUM

Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint

33RIESGO

abrir ↗

Referência

CVE-2026-10224

CVE-2026-10224MEDIUM

NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumption

33RIESGO

abrir ↗

Referência

CVE-2026-10193

CVE-2026-10193MEDIUM

OFCMS ComnController ComnController.java query sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10191

CVE-2026-10191HIGH

Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-14651

CVE-2026-14651MEDIUM

connorskees grass visitor denial of service

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Vitrax Pre-modded 1.0.6-r3 - Remote File Inclusion

CVE-2006-4779—webappsphp

PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier

23RIESGO

abrir ↗

Referência

CVE-2026-105174

CVE-2026-105174MEDIUM

Gerapy Project Management views.py project_create path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-12211

CVE-2026-12211MEDIUM

Intelbras iNVU 7016 FT Web syslog path traversal

33RIESGO

abrir ↗

Referência

CVE-2017-20271

CVE-2017-20271HIGH

Joomla StreetGuessr Game 1.1.8 SQL Injection via catid

41RIESGO

abrir ↗

Referência

CVE-2017-20270

CVE-2017-20270HIGH

Joomla! Component Twitch Tv 1.1 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2023-54353

CVE-2023-54353HIGH

Chromacam 4.0.3.0 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2026-11503

CVE-2026-11503HIGH

Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-11500

CVE-2026-11500LOW

Weaviate Static API Key client.go validateConfig authorization

28RIESGO

abrir ↗

Referência

CVE-2026-11497

CVE-2026-11497MEDIUM

D-Link DCS-5615 Boa Webserver boa.conf least privilege violation

33RIESGO

abrir ↗

Referência

CVE-2026-58053

CVE-2026-58053CRITICAL

Gitea act_runner - Container Hardening Bypass via Workflow Container Options

48RIESGO

abrir ↗

Referência

CVE-2026-105137

CVE-2026-105137LOW

Laradock Build Process Dockerfile code download

28RIESGO

abrir ↗

Referência

CVE-2019-25761

CVE-2019-25761HIGH

Joomla! Component JoomCRM 1.1.1 SQL Injection via deal_id

41RIESGO

abrir ↗

Referência

CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

Referência

CVE-2026-58052

CVE-2026-58052MEDIUM

7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision

33RIESGO

abrir ↗

Referência

CVE-2018-14894

CVE-2018-14894—

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file

23RIESGO

abrir ↗

Referência

CVE-2007-3808

CVE-2007-3808—

SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência

CVE-2019-13235

CVE-2019-13235—

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Traffic Stats - 'referralUrl.php?offset' SQL Injection

CVE-2007-3840—webappsphp

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2026-105135

CVE-2026-105135CRITICAL

InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection

48RIESGO

abrir ↗

Referência

CVE-2018-0752

CVE-2018-0752—

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709

23RIESGO

abrir ↗

Referência

CVE-2026-8771

CVE-2026-8771MEDIUM

linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-8770

CVE-2026-8770MEDIUM

continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-8769

CVE-2026-8769MEDIUM

vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption

33RIESGO

abrir ↗

Referência

CVE-2026-8768

CVE-2026-8768MEDIUM

vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-8767

CVE-2026-8767LOW

vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.