Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados

34.679CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

21.692 exploits

Referência

CVE-2026-14621

CVE-2026-14621LOW

FederatedAI FATE OSX Broker QueuePushReqStreamObserver.java QueuePushReqStreamObserver.initEggroll wrong session

28RIESGO

abrir ↗

Referência

CVE-2026-12194

CVE-2026-12194LOW

PHPIPAM Authenticated LFI

28RIESGO

abrir ↗

Referência

CVE-2026-10820

CVE-2026-10820HIGH

ProfilePress < 4.16.17 - Subscriber+ Subscription Cancellation via IDOR

41RIESGO

abrir ↗

Referência

CVE-2018-25351

CVE-2018-25351HIGH

Joomla! Component EkRishta 2.10 SQL Injection via username

41RIESGO

abrir ↗

Referência

CVE-2026-9299

CVE-2026-9299MEDIUM

omec-project amf handler.go PDUSessionResourceModifyIndication memory corruption

33RIESGO

abrir ↗

Referência

CVE-2026-9298

CVE-2026-9298MEDIUM

omec-project amf PathSwitchRequest memory corruption

33RIESGO

abrir ↗

Referência

CVE-2026-9297

CVE-2026-9297MEDIUM

Edimax BR-6428NS POST Request formWlbasic command injection

33RIESGO

abrir ↗

Referência

CVE-2026-9296

CVE-2026-9296MEDIUM

Edimax BR-6428NS POST Request formWlanM system command injection

33RIESGO

abrir ↗

Referência

CVE-2026-9295

CVE-2026-9295HIGH

Edimax BR-6428NS POST Request formWirelessTbl buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-9294

CVE-2026-9294HIGH

Edimax BR-6428NS POST Request formWanTcpipSetup buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2022-1163

CVE-2022-1163MEDIUM

Cross-site Scripting (XSS) - Stored in mineweb/minewebcms

33RIESGO

abrir ↗

Referência

CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

Referência

CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

Referência

CVE-2022-23642

CVE-2022-23642HIGH

Code Injection in Sourcegraph

78RIESGO

abrir ↗

Referência

CVE-2022-26986

CVE-2022-26986—

SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this al

23RIESGO

abrir ↗

Referência

CVE-2022-27412

CVE-2022-27412—

Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request.

23RIESGO

abrir ↗

Referência

CVE-2022-28117

CVE-2022-28117—

A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the ap

43RIESGO

abrir ↗

Referência

CVE-2022-30519

CVE-2022-30519MEDIUM

XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary c

33RIESGO

abrir ↗

Referência

CVE-2022-45030

CVE-2022-45030HIGH

A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may

41RIESGO

abrir ↗

Referência

CVE-2022-45297

CVE-2022-45297CRITICAL

EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter.

48RIESGO

abrir ↗

Referência

CVE-2022-45701

CVE-2022-45701HIGH

Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.

53RIESGO

abrir ↗

Referência

CVE-2022-47076

CVE-2022-47076HIGH

An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via Display

41RIESGO

abrir ↗

Referência

CVE-2022-47636

CVE-2022-47636—

A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open

23RIESGO

abrir ↗

Referência

CVE-2022-47986

CVE-2022-47986CRITICALbajo ataqueransomware

IBM Aspera Faspex code execution

100RIESGO

abrir ↗

Referência

CVE-2022-48197

CVE-2022-48197—

Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, Tree

38RIESGO

abrir ↗

Referência

CVE-2023-0315

CVE-2023-0315HIGH

Command Injection in froxlor/froxlor

78RIESGO

abrir ↗

Referência

CVE-2023-0315

CVE-2023-0315HIGH

Command Injection in froxlor/froxlor

78RIESGO

abrir ↗

Referência

CVE-2023-0493

CVE-2023-0493MEDIUM

Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

33RIESGO

abrir ↗

Referência

CVE-2023-0527

CVE-2023-0527LOW

PHPGurukul Online Security Guards Hiring System search-request.php cross site scripting

43RIESGO

abrir ↗

Referência

CVE-2023-0669

CVE-2023-0669HIGHbajo ataqueransomware

Fortra GoAnywhere MFT License Response Servlet Command Injection

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.