Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.449exploits catalogados

35.552CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.332 exploits

Referência

CVE-2017-20270

CVE-2017-20270HIGH

Joomla! Component Twitch Tv 1.1 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2017-20269

CVE-2017-20269HIGH

Joomla! Component KissGallery 1.0.0 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2026-12776

CVE-2026-12776MEDIUM

Montodel House-Rental-Management index.php houses sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-12774

CVE-2026-12774MEDIUM

BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-12771

CVE-2026-12771LOW

BerriAI litellm M2M JWT user_api_key_auth.py improper authorization

28RIESGO

abrir ↗

Referência

CVE-2026-12770

CVE-2026-12770MEDIUM

BerriAI litellm Admin Key key_management_endpoints.py improper authorization

33RIESGO

abrir ↗

Referência

CVE-2022-50972

CVE-2022-50972CRITICAL

WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php

48RIESGO

abrir ↗

Referência

CVE-2020-37255

CVE-2020-37255HIGH

WordPress Time Capsule Plugin 1.21.16 Authentication Bypass

41RIESGO

abrir ↗

Referência

CVE-2017-20268

CVE-2017-20268HIGH

Joomla! Component Zap Calendar Lite 4.3.4 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2017-20267

CVE-2017-20267HIGH

Joomla! Component Calendar Planner 1.0.1 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2017-20266

CVE-2017-20266HIGH

Joomla SP Movie Database 1.3 SQL Injection via searchword

41RIESGO

abrir ↗

Referência

CVE-2017-20265

CVE-2017-20265HIGH

Joomla! Component Flip Wall 8.0 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2017-20264

CVE-2017-20264HIGH

Joomla! Component Sponsor Wall 8.0 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2026-10181

CVE-2026-10181HIGH

TRENDnet TEW-432BRP formSysCmd stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-10175

CVE-2026-10175MEDIUM

Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

33RIESGO

abrir ↗

Referência

CVE-2026-10174

CVE-2026-10174MEDIUM

Aider-AI Aider Pre-commit Hook args.py protection mechanism

33RIESGO

abrir ↗

Referência

CVE-2026-10173

CVE-2026-10173MEDIUM

Orthanc Explorer 2 URL StudyList.vue cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-10172

CVE-2026-10172MEDIUM

Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-11333

CVE-2026-11333MEDIUM

tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-50232

CVE-2026-50232MEDIUM

Lyrion Music Server 9.2.0 Stored XSS via Metadata Tags

33RIESGO

abrir ↗

Referência

CVE-2026-49130

CVE-2026-49130MEDIUM

Music Player Daemon < 0.24.11 CRLF Injection via XspfPlaylistPlugin.cxx

33RIESGO

abrir ↗

Referência

CVE-2026-49129

CVE-2026-49129MEDIUM

Music Player Daemon < 0.24.11 SSRF via CurlInputPlugin

33RIESGO

abrir ↗

Referência

CVE-2026-49128

CVE-2026-49128HIGH

Music Player Daemon < 0.24.11 Path Traversal via LocalStorage URI Handling

41RIESGO

abrir ↗

Referência

CVE-2026-11554

CVE-2026-11554MEDIUM

TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation

33RIESGO

abrir ↗

Referência

CVE-2026-11517

CVE-2026-11517HIGH

UTT HiPER 2610G formConfigDnsFilterGlobal strcpy buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-11512

CVE-2026-11512MEDIUM

itsourcecode Hospital Management System billing.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-11495

CVE-2026-11495MEDIUM

CodeAstro Ingredients Stock Management System add_stock.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11494

CVE-2026-11494MEDIUM

TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation

33RIESGO

abrir ↗

Referência

CVE-2026-11493

CVE-2026-11493LOW

Tenda AC15 Samba smb.conf weak password

28RIESGO

abrir ↗

Referência

CVE-2026-11492

CVE-2026-11492MEDIUM

D-Link DIR-823G vsftpd vsftpd.conf least privilege violation

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.