Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.794exploits catalogados

36.057CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientes populares riesgo

22.721 exploits

Referência

CVE-2026-12797

CVE-2026-12797MEDIUM

BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization

33RIESGO

abrir ↗

Referência

CVE-2026-12776

CVE-2026-12776MEDIUM

Montodel House-Rental-Management index.php houses sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-12774

CVE-2026-12774MEDIUM

BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-12771

CVE-2026-12771LOW

BerriAI litellm M2M JWT user_api_key_auth.py improper authorization

28RIESGO

abrir ↗

Referência

CVE-2022-50972

CVE-2022-50972CRITICAL

WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php

48RIESGO

abrir ↗

Referência

CVE-2026-10877

CVE-2026-10877MEDIUM

SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10876

CVE-2026-10876MEDIUM

SourceCodester Ship Ferry Ticket Reservation System admin improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-10870

CVE-2026-10870HIGH

Shibby Tomato Web UI rc start_dhcpc os command injection

41RIESGO

abrir ↗

Referência

CVE-2025-71316

CVE-2025-71316CRITICAL

SQLite sqldiff remote code execution via argument injection

48RIESGO

abrir ↗

Referência

CVE-2026-25551

CVE-2026-25551HIGH

Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting Service

41RIESGO

abrir ↗

Referência

CVE-2026-10813

CVE-2026-10813LOW

LMCache KV Cache utils.py hex_hash_to_int16 weak hash

28RIESGO

abrir ↗

Referência

CVE-2026-10811

CVE-2026-10811MEDIUM

itsourcecode Fees Management System receipt.php sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

iPhotoAlbum 1.1 - 'header.php' Remote File Inclusion

CVE-2005-2246—webappsphp

Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code v

23RIESGO

abrir ↗

Referência

CVE-2026-10550

CVE-2026-10550MEDIUM

elunez eladmin Application Deployment App.java command injection

33RIESGO

abrir ↗

Referência

CVE-2026-10548

CVE-2026-10548MEDIUM

NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authentication

33RIESGO

abrir ↗

Referência

CVE-2026-10301

CVE-2026-10301MEDIUM

itsourcecode Fees Management System index.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-10295

CVE-2026-10295MEDIUM

SourceCodester Customer Review App review_app.py get_all_reviews denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-10292

CVE-2026-10292HIGH

UTT HiPER 1200GW formTaskEdit strcpy stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-10290

CVE-2026-10290MEDIUM

code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-10289

CVE-2026-10289MEDIUM

code-projects Hotel and Tourism Reservation System tour.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-12189

CVE-2026-12189MEDIUM

Moovit Bus & Public Transit App com.tranzmate improper authorization in handler for custom url scheme

33RIESGO

abrir ↗

Referência

CVE-2026-12187

CVE-2026-12187HIGH

GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection

41RIESGO

abrir ↗

Referência

CVE-2026-12186

CVE-2026-12186HIGH

GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection

41RIESGO

abrir ↗

Referência

CVE-2025-15546

CVE-2025-15546MEDIUM

Iptanus File Upload < 5.1.7 - File Overwrite via Race Condition

33RIESGO

abrir ↗

Referência

CVE-2026-12174

CVE-2026-12174HIGH

D-Link DCS-935L HTTP rhea snprintf format string

41RIESGO

abrir ↗

Referência

CVE-2026-25557

CVE-2026-25557MEDIUM

Evoluted PHP Directory Listing Script 4.0.5 Reflected XSS via dir parameter

33RIESGO

abrir ↗

Referência

CVE-2004-0798

CVE-2004-0798—

Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to

50RIESGO

abrir ↗

Referência

CVE-2026-11621

CVE-2026-11621MEDIUM

Dcat-Admin User Setting upload editorMDUpload unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-11584

CVE-2026-11584MEDIUM

CodeAstro Student Attendance Management System createClass.php edit sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11583

CVE-2026-11583MEDIUM

CodeAstro Student Attendance Management System createClass.php sql injection

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.