Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.258exploits catalogados

36.019CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8811Nuclei 4349Metasploit 3488✓ solo verificadosrecientes populares riesgo

22.657 exploits

Referência

CVE-2026-8130

CVE-2026-8130MEDIUM

SourceCodester SUP Online Shopping message.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-8129

CVE-2026-8129MEDIUM

SourceCodester SUP Online Shopping wishlist.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-8128

CVE-2026-8128MEDIUM

SourceCodester SUP Online Shopping viewmsg.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-8127

CVE-2026-8127MEDIUM

eladmin Users API Endpoint UserController.java checkLevel access control

33RIESGO

abrir ↗

Referência

CVE-2026-8126

CVE-2026-8126MEDIUM

SourceCodester Comment System post_comment.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-8125

CVE-2026-8125MEDIUM

code-projects Simple Chat System sendMessage.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-8124

CVE-2026-8124MEDIUM

GPAC box_code_base.c sidx_box_read allocation of resources

33RIESGO

abrir ↗

Referência

CVE-2026-8123

CVE-2026-8123MEDIUM

Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8122

CVE-2026-8122MEDIUM

Open5GS NSSF message.c ogs_sbi_discovery_option_add_service_names denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-10302

CVE-2026-10302MEDIUM

itsourcecode Fees Management System manage_fee.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-71509

CVE-2026-71509HIGH

Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint

41RIESGO

abrir ↗

Referência

CVE-2026-71508

CVE-2026-71508HIGH

Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpoint

41RIESGO

abrir ↗

Referência

CVE-2026-71507

CVE-2026-71507HIGH

Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routes

41RIESGO

abrir ↗

Referência

CVE-2026-71506

CVE-2026-71506HIGH

Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpoint

41RIESGO

abrir ↗

Referência

CVE-2016-20068

CVE-2016-20068HIGH

WordPress Booking Calendar Contact Form 1.0.23 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2019-25746

CVE-2019-25746HIGH

WordPress Sliced Invoices 3.8.2 SQL Injection via post Parameter

41RIESGO

abrir ↗

Referência

CVE-2026-12129

CVE-2026-12129MEDIUM

CodeAstro Human Resource Management System Dashboard add_tod cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-24067

CVE-2026-24067HIGH

Slate Digital Connect macOS XPC PID validation privilege escalation

41RIESGO

abrir ↗

Referência

CVE-2025-71319

CVE-2025-71319HIGH

image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

41RIESGO

abrir ↗

Referência★ 14

watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

CVE-2026-10520CRITICAL

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

85RIESGO

abrir ↗

Referência

CVE-2026-65053

CVE-2026-65053MEDIUM

Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name

33RIESGO

abrir ↗

Referência✓ VexDay Proof

FAQ Manager 1.2 - 'categorie.php' SQL Injection

CVE-2008-5287—webappsphp

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbi

23RIESGO

abrir ↗

Referência

CVE-2026-78248

CVE-2026-78248MEDIUM

SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-78247

CVE-2026-78247MEDIUM

SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-78202

CVE-2026-78202MEDIUM

itsourcecode Payroll System admin_class.php save_settings unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-78201

CVE-2026-78201MEDIUM

itsourcecode Payroll System admin_class.php login sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-78200

CVE-2026-78200MEDIUM

itsourcecode Library Management System editbooks.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-78199

CVE-2026-78199MEDIUM

SourceCodester Simple Online Food Ordering System view_prod.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2017-11548

CVE-2017-11548—

The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of servic

23RIESGO

abrir ↗

Referência

CVE-2026-9513

CVE-2026-9513MEDIUM

Totolink CA750-PoE Setting cstecgi.cgi NTPSyncWithHost os command injection

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.