Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.900exploits catalogados
35.840CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.573 exploits
Referência
CVE-2026-9576
CVE-2026-9576MEDIUM
Fluent Booking < 2.1.2 - Calendar Manager+ Sensitive Information Disclosure via Attendee Export
33RIESGO
abrir ↗
Referência
CVE-2026-13565
CVE-2026-13565MEDIUM
SourceCodester Class and Exam Timetabling System edit_class1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13563
CVE-2026-13563HIGH
Edimax EW-7478APC POST Request formL2TPSetup stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-13562
CVE-2026-13562HIGH
Edimax EW-7478APC POST Request formiNICSiteSurvey buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-13546
CVE-2026-13546MEDIUM
Feehi CMS REST API Endpoint articles missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-13524
CVE-2026-13524MEDIUM
CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-13523
CVE-2026-13523MEDIUM
GPAC ISOBMFF base_encoding.c data amplification
33RIESGO
abrir ↗
Referência
CVE-2026-13521
CVE-2026-13521MEDIUM
SourceCodester Class and Exam Timetabling System preview5.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13520
CVE-2026-13520MEDIUM
itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13519
CVE-2026-13519HIGH
Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-13518
CVE-2026-13518HIGH
Tenda JD12L addressNat fromAddressNat stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-13489
CVE-2026-13489LOW
78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization
28RIESGO
abrir ↗
Referência
CVE-2026-13488
CVE-2026-13488MEDIUM
SourceCodester Class and Exam Timetabling System preview7.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13487
CVE-2026-13487MEDIUM
SourceCodester Class and Exam Timetabling System archive.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-56786
CVE-2026-56786CRITICAL
RTKLIB 2.4.3 - Out-of-bounds Write in decode_type1033 via Crafted RTCM3 Message
48RIESGO
abrir ↗
Referência
CVE-2026-56779
CVE-2026-56779MEDIUM
MaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url Parameters
33RIESGO
abrir ↗
Referência
CVE-2026-56774
CVE-2026-56774MEDIUM
Kanboard - Cross-User Deletion of Persistent Login Sessions via Unvalidated Session ID
33RIESGO
abrir ↗
Referência
CVE-2026-56770
CVE-2026-56770HIGH
libais 0.15 - Out-of-bounds Vector Access in VdmStream::AddLine via Invalid Sequential Message ID
41RIESGO
abrir ↗
Referência
CVE-2026-56769
CVE-2026-56769MEDIUM
Huly Platform - Server-Side Request Forgery via /import Endpoint
33RIESGO
abrir ↗
Referência
CVE-2010-4870
CVE-2010-4870—
SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência
CVE-2010-4870
CVE-2010-4870—
SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência
CVE-2026-9710
CVE-2026-9710HIGH
Themeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure
41RIESGO
abrir ↗
Referência
CVE-2010-4872
CVE-2010-4872—
SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2026-12809
CVE-2026-12809MEDIUM
Edimax BR-6478AC V2 POST Request wiz_5in1_redirect command injection
33RIESGO
abrir ↗
Referência
CVE-2026-12786
CVE-2026-12786HIGH
Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control
41RIESGO
abrir ↗
Referência
CVE-2026-12784
CVE-2026-12784HIGH
IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys access control
41RIESGO
abrir ↗
Referência
CVE-2026-12770
CVE-2026-12770MEDIUM
BerriAI litellm Admin Key key_management_endpoints.py improper authorization
33RIESGO
abrir ↗
Referência
CVE-2020-37255
CVE-2020-37255HIGH
WordPress Time Capsule Plugin 1.21.16 Authentication Bypass
41RIESGO
abrir ↗
Referência
CVE-2013-5978
CVE-2013-5978—
Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPr
23RIESGO
abrir ↗
Referência
CVE-2013-5219
CVE-2013-5219—
Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrar
23RIESGO
abrir ↗
← anteriorpágina 614 / 753siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.