Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.302exploits catalogados
35.469CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.301 exploits
Referência
CVE-2026-6110
CVE-2026-6110MEDIUM
FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection
33RIESGO
abrir ↗
Referência
CVE-2026-6108
CVE-2026-6108MEDIUM
1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-6106
CVE-2026-6106MEDIUM
1Panel-dev MaxKB Public Chat static_headers_middleware.py StaticHeadersMiddleware cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6105
CVE-2026-6105MEDIUM
perfree go-fastdfs-web doInstall InstallController.java improper authorization
33RIESGO
abrir ↗
Referência
CVE-2025-9484
CVE-2025-9484MEDIUM
Missing Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-1092
CVE-2026-1092HIGH
Improper Validation of Specified Quantity in Input in GitLab
41RIESGO
abrir ↗
Referência
CVE-2026-1101
CVE-2026-1101MEDIUM
Improper Validation of Specified Quantity in Input in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-1516
CVE-2026-1516MEDIUM
Improper Control of Generation of Code ('Code Injection') in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-1752
CVE-2026-1752MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-2104
CVE-2026-2104MEDIUM
Authorization Bypass Through User-Controlled Key in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-2619
CVE-2026-2619MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2017-7293
CVE-2017-7293—
The Dolby DAX2 and DAX3 API services are vulnerable to a privilege escalation vulnerability that allows a normal user to
23RIESGO
abrir ↗
Referência
CVE-2010-4280
CVE-2010-4280—
Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2017-7690
CVE-2017-7690—
Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary w
23RIESGO
abrir ↗
Referência
CVE-2026-14440
CVE-2026-14440HIGH
Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records
41RIESGO
abrir ↗
Referência
CVE-2026-58451
CVE-2026-58451HIGH
Horde IMP < 7.0.1 Path Traversal via Compose.php img src
41RIESGO
abrir ↗
Referência
CVE-2017-7938
CVE-2017-7938MEDIUM
Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cau
33RIESGO
abrir ↗
Referência
CVE-2017-7953
CVE-2017-7953—
INFOR EAM V11.0 Build 201410 has XSS via comment fields.
23RIESGO
abrir ↗
Referência
CVE-2017-7981
CVE-2017-7981—
Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project W
28RIESGO
abrir ↗
Referência✓ VexDay Proof
WEBBDOMAIN Post Card 1.02 - 'catid' SQL Injection
CVE-2008-6622—webappsphp
SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WEBBDOMAIN Petition 1.02/2.0/3.0 - Authentication Bypass
CVE-2008-6624—webappsphp
SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MercuryBoard 1.1.5 - 'login.php' Blind SQL Injection
CVE-2008-6632—webappsphp
SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RoomPHPlanning 1.5 - 'idresa' SQL Injection
CVE-2008-6633—webappsphp
SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idre
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RoomPHPlanning 1.5 - Multiple SQL Injections
CVE-2008-6634—webappsphp
SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idro
23RIESGO
abrir ↗
Referência
CVE-2026-13552
CVE-2026-13552MEDIUM
itsourcecode Online Hotel Management System controller.php edit sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13551
CVE-2026-13551MEDIUM
itsourcecode Baptism Information Management System editBaptism.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13550
CVE-2026-13550MEDIUM
itsourcecode Baptism Information Management System delbaptism.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13548
CVE-2026-13548MEDIUM
itsourcecode Hospital Management System doctortimings.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2010-4365
CVE-2010-4365—
SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2010-4365
CVE-2010-4365—
SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote atta
23RIESGO
abrir ↗
← anteriorpágina 454 / 744siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.