Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.900exploits catalogados

35.840CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientes populares riesgo

22.573 exploits

Referência

CVE-2026-14688

CVE-2026-14688MEDIUM

itsourcecode Online Hotel Management System login.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14687

CVE-2026-14687MEDIUM

666ghj BettaFish InsightEngine search-result Deduplication agent.py _deduplicate_results partial string comparison

33RIESGO

abrir ↗

Referência

CVE-2012-4057

CVE-2012-4057—

Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute arbitrary code via a crafted

23RIESGO

abrir ↗

Referência

CVE-2026-65920

CVE-2026-65920MEDIUM

Diffusers Path Traversal via weight_map Arbitrary File Read

33RIESGO

abrir ↗

Referência

CVE-2026-65918

CVE-2026-65918HIGH

PyTorch torchvision GIF Decoder Out-of-bounds Heap Read

41RIESGO

abrir ↗

Referência

CVE-2026-65702

CVE-2026-65702HIGH

Vanna 2.0.2 Path Traversal via FileSystemConversationStore

41RIESGO

abrir ↗

Referência

CVE-2026-65701

CVE-2026-65701CRITICAL

SoftVC VITS Singing Voice Conversion Path Traversal via /wav2wav Flask Route

48RIESGO

abrir ↗

Referência

CVE-2010-4864

CVE-2010-4864—

SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to execu

23RIESGO

abrir ↗

Referência

CVE-2010-4866

CVE-2010-4866—

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2010-4869

CVE-2010-4869—

SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via t

23RIESGO

abrir ↗

Referência

CVE-2012-4060

CVE-2012-4060—

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2010-0951

CVE-2010-0951—

SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência

CVE-2026-59097

CVE-2026-59097MEDIUM

Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

33RIESGO

abrir ↗

Referência

CVE-2026-59095

CVE-2026-59095HIGH

LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl

41RIESGO

abrir ↗

Referência

CVE-2026-59094

CVE-2026-59094HIGH

Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store

41RIESGO

abrir ↗

Referência

CVE-2026-34097

CVE-2026-34097MEDIUM

Guardian Language-System XSS via id Parameter in text_file.php

33RIESGO

abrir ↗

Referência

CVE-2026-34096

CVE-2026-34096MEDIUM

Guardian Language-System XSS via name Parameter in designer.php

33RIESGO

abrir ↗

Referência

CVE-2026-58127

CVE-2026-58127CRITICAL

PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service

48RIESGO

abrir ↗

Referência

CVE-2026-11562

CVE-2026-11562MEDIUM

WS Form LITE < 1.11.8 - Subscriber+ Arbitrary Settings Update

33RIESGO

abrir ↗

Referência

CVE-2026-9576

CVE-2026-9576MEDIUM

Fluent Booking < 2.1.2 - Calendar Manager+ Sensitive Information Disclosure via Attendee Export

33RIESGO

abrir ↗

Referência

CVE-2026-13565

CVE-2026-13565MEDIUM

SourceCodester Class and Exam Timetabling System edit_class1.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13563

CVE-2026-13563HIGH

Edimax EW-7478APC POST Request formL2TPSetup stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-13562

CVE-2026-13562HIGH

Edimax EW-7478APC POST Request formiNICSiteSurvey buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-13546

CVE-2026-13546MEDIUM

Feehi CMS REST API Endpoint articles missing authentication

33RIESGO

abrir ↗

Referência

CVE-2026-13524

CVE-2026-13524MEDIUM

CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-13523

CVE-2026-13523MEDIUM

GPAC ISOBMFF base_encoding.c data amplification

33RIESGO

abrir ↗

Referência

CVE-2026-13521

CVE-2026-13521MEDIUM

SourceCodester Class and Exam Timetabling System preview5.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13520

CVE-2026-13520MEDIUM

itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13519

CVE-2026-13519HIGH

Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-13518

CVE-2026-13518HIGH

Tenda JD12L addressNat fromAddressNat stack-based overflow

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.