Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.652exploits catalogados

34.545CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8225Nuclei 4228Metasploit 3467✓ solo verificadosrecientes populares riesgo

21.581 exploits

Referência

CVE-2026-7684

CVE-2026-7684HIGH

Edimax BR-6428nC setWAN buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-7681

CVE-2026-7681MEDIUM

jsbroks COCO Annotator Dataset API datasets.py authorization

33RIESGO

abrir ↗

Referência

CVE-2026-7680

CVE-2026-7680MEDIUM

jsbroks COCO Annotator Data Endpoint datasets.py path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-10185

CVE-2026-10185MEDIUM

SourceCodester Hospitals Patient Records Management System Users.php save sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10184

CVE-2026-10184MEDIUM

SourceCodester Hospitals Patient Records Management System Users.php delete sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10170

CVE-2026-10170MEDIUM

code-projects Visitor Management System phone_0.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10169

CVE-2026-10169MEDIUM

OUSL-GROUP-BrinaryBrains School Student Management System Forgot Password Endpoint Login.php ajax_forgot_password password recovery

33RIESGO

abrir ↗

Referência

CVE-2026-10167

CVE-2026-10167MEDIUM

OUSL-GROUP-BrinaryBrains School Student Management System MY_Controller Login.php sign_auth_cookie improper authentication

33RIESGO

abrir ↗

Referência

CVE-2026-7398

CVE-2026-7398MEDIUM

florensiawidjaja BioinfoMCP Upload Endpoint app.py upload path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-7397

CVE-2026-7397MEDIUM

NousResearch hermes-agent file_tools.py _check_sensitive_path symlink

33RIESGO

abrir ↗

Referência

CVE-2026-7396

CVE-2026-7396MEDIUM

NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-7394

CVE-2026-7394MEDIUM

SourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7393

CVE-2026-7393MEDIUM

SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-7291

CVE-2026-7291MEDIUM

o2oa URL Fetching FileAction.java FileAction server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-8764

CVE-2026-8764HIGH

H3C Magic B3 aspForm UpdateWanParams buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2020-37244

CVE-2020-37244HIGH

WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx

41RIESGO

abrir ↗

Referência

CVE-2020-37243

CVE-2020-37243HIGH

WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS

41RIESGO

abrir ↗

Referência

CVE-2020-37242

CVE-2020-37242HIGH

WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx

41RIESGO

abrir ↗

Referência

CVE-2026-7678

CVE-2026-7678MEDIUM

YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7443

CVE-2026-7443MEDIUM

BurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-7420

CVE-2026-7420HIGH

UTT HiPER 1250GW ConfigAdvideo strcpy buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-7419

CVE-2026-7419HIGH

UTT HiPER 1250GW formTaskEdit_ap strcpy buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-7418

CVE-2026-7418HIGH

UTT HiPER 1250GW NTP strcpy buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-7417

CVE-2026-7417MEDIUM

Algovate xhs-mcp MCP mcp.server.ts xhs_publish_content server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-7416

CVE-2026-7416MEDIUM

PolarVista xcode-mcp-server MCP index.ts run_tests os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-7410

CVE-2026-7410MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7409

CVE-2026-7409MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin wp-Table 1.43 - 'inc_dir' Remote File Inclusion

CVE-2007-2484—webappsphp

PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress,

35RIESGO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin myflash 1.00 - 'wppath' Remote File Inclusion

CVE-2007-2485—webappsphp

PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allow

35RIESGO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module v4bJournal - SQL Injection

CVE-2007-2492—webappsphp

SQL injection vulnerability in index.php in the v4bJournal module for PostNuke allows remote authenticated users to exec

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.