Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados

35.420CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.266 exploits

Referência

CVE-2019-25656

CVE-2019-25656HIGH

R i386 3.5.0 Local Buffer Overflow SEH

41RIESGO

abrir ↗

Referência

CVE-2026-5596

CVE-2026-5596MEDIUM

griptape-ai griptape SqlTool tool.py sql injection

33RIESGO

abrir ↗

Referência

CVE-2018-25256

CVE-2018-25256MEDIUM

IP TOOLS 2.50 Local Buffer Overflow Denial of Service

33RIESGO

abrir ↗

Referência

CVE-2026-5595

CVE-2026-5595MEDIUM

griptape-ai griptape FileManagerTool save_memory_artifacts_to_disk path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-5594

CVE-2026-5594MEDIUM

premAI-io premsql followup.py eval code injection

33RIESGO

abrir ↗

Referência

CVE-2026-5587

CVE-2026-5587MEDIUM

wbbeyourself MAC-SQL Refiner Agent agents.py _execute_sql sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5586

CVE-2026-5586MEDIUM

zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5564

CVE-2026-5564MEDIUM

code-projects Simple Laundry System Parameter searchguest.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5563

CVE-2026-5563MEDIUM

AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5562

CVE-2026-5562MEDIUM

provectus kafka-ui Endpoint testexecutions validateAccess code injection

33RIESGO

abrir ↗

Referência

CVE-2026-5561

CVE-2026-5561MEDIUM

Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection

33RIESGO

abrir ↗

Referência

CVE-2026-5560

CVE-2026-5560MEDIUM

PHPGurukul Online Shopping Portal Project Parameter payment-method.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2010-5009

CVE-2010-5009—

SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência

CVE-2010-5010

CVE-2010-5010—

Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers t

23RIESGO

abrir ↗

Referência

CVE-2010-5011

CVE-2010-5011—

SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência

CVE-2010-5011

CVE-2010-5011—

SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência

CVE-2010-5012

CVE-2010-5012—

SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2010-5012

CVE-2010-5012—

SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2018-25381

CVE-2018-25381HIGH

Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters

41RIESGO

abrir ↗

Referência

CVE-2010-5013

CVE-2010-5013—

SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows rem

23RIESGO

abrir ↗

Referência

CVE-2010-5013

CVE-2010-5013—

SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows rem

23RIESGO

abrir ↗

Referência

CVE-2010-5014

CVE-2010-5014—

SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência

CVE-2010-5015

CVE-2010-5015—

SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência

CVE-2010-5019

CVE-2010-5019—

SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência

CVE-2010-5033

CVE-2010-5033—

SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2010-5033

CVE-2010-5033—

SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2018-11526

CVE-2018-11526—

The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.

23RIESGO

abrir ↗

Referência

CVE-2018-11529

CVE-2018-11529—

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arb

50RIESGO

abrir ↗

Referência

CVE-2018-25328

CVE-2018-25328HIGH

VX Search 10.6.18 Local Buffer Overflow via Directory Field

41RIESGO

abrir ↗

Referência

CVE-2010-5041

CVE-2010-5041—

SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute ar

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.