Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2026-16327

CVE-2026-16327MEDIUM

D-Link DNS-320 upload.php unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-12724

CVE-2026-12724MEDIUM

Kirki < 6.0.12 - Unauthenticated HTML Injection in Password Reset Email via kirki-forgot-password

33RIESGO

abrir ↗

Referência

CVE-2026-90619

CVE-2026-90619MEDIUM

0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-90843

CVE-2026-90843MEDIUM

SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-14642

CVE-2026-14642MEDIUM

SourceCodester Class and Exam Timetabling System edit_class2.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14641

CVE-2026-14641MEDIUM

SourceCodester Class and Exam Timetabling System edit_course.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2017-17588

CVE-2017-17588—

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id par

23RIESGO

abrir ↗

Referência

CVE-2026-15700

CVE-2026-15700MEDIUM

DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-15694

CVE-2026-15694HIGH

Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-16228

CVE-2026-16228MEDIUM

SourceCodester Class and Exam Timetabling System edit_schoolyr.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-15692

CVE-2026-15692HIGH

Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-64821

CVE-2026-64821MEDIUM

djangoSIGE 1.10 CSRF via GET-based Order Cancellation Views

33RIESGO

abrir ↗

Referência

CVE-2017-17590

CVE-2017-17590—

FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-17594

CVE-2017-17594—

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-74926

CVE-2026-74926HIGH

MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpoint

41RIESGO

abrir ↗

Referência

CVE-2026-15496

CVE-2026-15496MEDIUM

SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection

33RIESGO

abrir ↗

Referência

CVE-2017-17600

CVE-2017-17600—

Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-17600

CVE-2017-17600—

Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-67348

CVE-2026-67348HIGH

Julep Insecure Direct Object Reference via GET /executions/{execution_id}

41RIESGO

abrir ↗

Referência

CVE-2026-67347

CVE-2026-67347MEDIUM

Vendure 3.7.1 Cross-Channel Authorization Bypass via StockLocation and Asset Update

33RIESGO

abrir ↗

Referência

CVE-2026-67345

CVE-2026-67345HIGH

MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft

41RIESGO

abrir ↗

Referência

CVE-2017-17601

CVE-2017-17601—

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-16152

CVE-2026-16152MEDIUM

SourceCodester Class and Exam Timetabling System edit_rooma.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-16133

CVE-2026-16133LOW

LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection

28RIESGO

abrir ↗

Referência

CVE-2026-16131

CVE-2026-16131MEDIUM

itsourcecode Hospital Management System prescriptionrecord.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2017-17608

CVE-2017-17608—

Child Care Script 1.0 has SQL Injection via the /list city parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-90498

CVE-2026-90498MEDIUM

lenve vhr vhr.sql default credentials

33RIESGO

abrir ↗

Referência

CVE-2026-90972

CVE-2026-90972MEDIUM

WP Fusion Lite < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data Deletion

33RIESGO

abrir ↗

Referência

CVE-2017-2456

CVE-2017-2456—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

23RIESGO

abrir ↗

Referência

CVE-2026-86789

CVE-2026-86789MEDIUM

Connections Business Directory <= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.