Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.533exploits catalogados
35.607CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.367 exploits
Referência
CVE-2026-10114
CVE-2026-10114MEDIUM
Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write
33RIESGO
abrir ↗
Referência
CVE-2026-10113
CVE-2026-10113MEDIUM
Open5GS Shared NF-profile nnrf-handler.c denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-10112
CVE-2026-10112MEDIUM
sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-10111
CVE-2026-10111MEDIUM
sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-10110
CVE-2026-10110MEDIUM
code-projects Student Details Management System index.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-44420
CVE-2026-44420HIGH
FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS
41RIESGO
abrir ↗
Referência
CVE-2018-25398
CVE-2018-25398HIGH
The Open ISES Project 3.30A SQL Injection via main.php
41RIESGO
abrir ↗
Referência
CVE-2018-25397
CVE-2018-25397MEDIUM
PHP-SHOP 1.0 Cross-Site Request Forgery via users.php
33RIESGO
abrir ↗
Referência
CVE-2018-25396
CVE-2018-25396HIGH
Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm
41RIESGO
abrir ↗
Referência
CVE-2018-25395
CVE-2018-25395HIGH
Kados R10 GreenBee SQL Injection via update_feature.php
41RIESGO
abrir ↗
Referência
CVE-2019-0539
CVE-2019-0539—
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
45RIESGO
abrir ↗
Referência
CVE-2019-0539
CVE-2019-0539—
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
45RIESGO
abrir ↗
Referência
CVE-2019-0731
CVE-2019-0731—
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak
23RIESGO
abrir ↗
Referência
CVE-2026-7847
CVE-2026-7847LOW
chatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random values
28RIESGO
abrir ↗
Referência
CVE-2026-7846
CVE-2026-7846LOW
chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou
28RIESGO
abrir ↗
Referência
CVE-2026-7845
CVE-2026-7845LOW
chatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash
28RIESGO
abrir ↗
Referência
CVE-2019-1145
CVE-2019-1145HIGH
Microsoft Graphics Remote Code Execution Vulnerability
46RIESGO
abrir ↗
Referência
ManageEngine Applications Manager 14.0 - Authentication Bypass / Remote Command Execution (Metasploit)
CVE-2019-11469—remotemultiple
Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequen
28RIESGO
abrir ↗
Referência
CVE-2026-7745
CVE-2026-7745MEDIUM
CodeAstro Online Classroom facultydetails sql injection
33RIESGO
abrir ↗
Referência
CVE-2019-0796
CVE-2019-0796—
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), ak
23RIESGO
abrir ↗
Referência
CVE-2019-0841
CVE-2019-0841HIGHbajo ataqueransomware
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li
98RIESGO
abrir ↗
Referência
CVE-2026-47102
CVE-2026-47102HIGH
LiteLLM < 1.83.10 Privilege Escalation via User Update
41RIESGO
abrir ↗
Referência
CVE-2026-47114
CVE-2026-47114HIGH
IINA < 1.4.3 Command Execution via iina://open URL Scheme
41RIESGO
abrir ↗
Referência
CVE-2019-0841
CVE-2019-0841HIGHbajo ataqueransomware
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li
98RIESGO
abrir ↗
Referência
Titan FTP Server Version 2019 Build 3505 - Directory Traversal / Local File Inclusion
CVE-2019-10009—webappswindows
A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated use
28RIESGO
abrir ↗
Referência
CVE-2019-1003000
CVE-2019-1003000—
A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/
60RIESGO
abrir ↗
Referência
CVE-2019-1003000
CVE-2019-1003000—
A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/
60RIESGO
abrir ↗
Referência
CVE-2019-1003000
CVE-2019-1003000—
A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/
60RIESGO
abrir ↗
Referência
CVE-2026-7677
CVE-2026-7677MEDIUM
kerwincui FastBee System Notice SysNoticeController.java add cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-7670
CVE-2026-7670MEDIUM
Jinher OA UserSel.aspx sql injection
33RIESGO
abrir ↗
← anteriorpágina 490 / 746siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.