Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados
34.638CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.662 exploits
Referência
CVE-2026-10217
CVE-2026-10217MEDIUM
nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges management
33RIESGO
abrir ↗
Referência
CVE-2026-10216
CVE-2026-10216MEDIUM
unitedbyai droidclaw claim Endpoint pairing.ts excessive authentication
33RIESGO
abrir ↗
Referência
CVE-2026-10215
CVE-2026-10215MEDIUM
Dolibarr ERP CRM Leave Request REST API api_holidays.class.php checkUserAccessToObject improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-10214
CVE-2026-10214MEDIUM
zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-10213
CVE-2026-10213MEDIUM
AstrBotDevs AstrBot API Endpoint delete path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-10212
CVE-2026-10212MEDIUM
AstrBotDevs AstrBot astr_main_agent.py astr_main_agent authorization
33RIESGO
abrir ↗
Referência
CVE-2026-10211
CVE-2026-10211MEDIUM
AstrBotDevs AstrBot fs.py _normalize_rw_path authorization
33RIESGO
abrir ↗
Referência
CVE-2026-9409
CVE-2026-9409MEDIUM
Sushmi-pal Invoice-System User Management user improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-9364
CVE-2026-9364MEDIUM
projectworlds Online Art Gallery Shop adminHome.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9360
CVE-2026-9360HIGH
Edimax EW-7438RPn POST Request formwlencrypt24g buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9359
CVE-2026-9359MEDIUM
Edimax EW-7438RPn POST Request formHwSet command injection
33RIESGO
abrir ↗
Referência
CVE-2026-9358
CVE-2026-9358MEDIUM
postcss-selector-parser AST Serialization container.js toString recursion
33RIESGO
abrir ↗
Referência
CVE-2026-9355
CVE-2026-9355MEDIUM
SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9354
CVE-2026-9354MEDIUM
NousResearch hermes-agent Slack Agent/Mattermost Agent escape output
33RIESGO
abrir ↗
Referência
CVE-2026-9353
CVE-2026-9353MEDIUM
NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection
33RIESGO
abrir ↗
Referência
CVE-2026-9352
CVE-2026-9352MEDIUM
NousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-9351
CVE-2026-9351MEDIUM
NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-9350
CVE-2026-9350MEDIUM
NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization
33RIESGO
abrir ↗
Referência
CVE-2026-9349
CVE-2026-9349MEDIUM
calcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-9348
CVE-2026-9348HIGH
Edimax EW-7438RPn webs mp stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9347
CVE-2026-9347MEDIUM
Edimax EW-7438RPn webs formWizSurvey os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-9346
CVE-2026-9346HIGH
Edimax EW-7438RPn webs formWirelessTbl buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9345
CVE-2026-9345HIGH
Edimax EW-7438RPn webs formWizSurvey buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-9342
CVE-2026-9342MEDIUM
SourceCodester Hospitals Patient Records Management System view_history.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2022-50969
CVE-2022-50969MEDIUM
uBidAuction 2.0.1 mailingLog manage Reflected XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50968
CVE-2022-50968MEDIUM
uBidAuction 2.0.1 auctions manage Reflected XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50967
CVE-2022-50967MEDIUM
uBidAuction 2.0.1 tickets manage Reflected XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50966
CVE-2022-50966MEDIUM
uBidAuction 2.0.1 news manage Reflected XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50966
CVE-2022-50966MEDIUM
uBidAuction 2.0.1 news manage Reflected XSS
33RIESGO
abrir ↗
Referência
CVE-2026-8116
CVE-2026-8116MEDIUM
huangjunsen0406 xiaozhi-mcphub dxtController.ts path traversal
33RIESGO
abrir ↗
← anteriorpágina 261 / 723siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.