Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 50 min
22,162
Total alertas
4698
Críticas
16876
Altas
8
Ransomware
1037
Esta semana
RSS
Alta × cwe-89 × Limpiar todo ×
M Alto vulnerabilidad
29/06/2026
[CVE-2026-13521] A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php. Affect…
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php. Affected by this vulnerability is an unknown functionality of the file /preview5.php. Such manipulation of the argument course_year_section leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
28/06/2026
[CVE-2026-13498] A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unk…
A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unknown function of the file /forgotpassword.php of the component POST Parameter Handler. Such manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used. This product does not use versioning. This is why informati…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
28/06/2026
[CVE-2026-13488] A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. A…
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. Affected by this vulnerability is an unknown functionality of the file /preview7.php. The manipulation of the argument course_year_section results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
28/06/2026
[CVE-2026-13487] A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is …
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive.php. The manipulation of the argument sy leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
28/06/2026
[CVE-2026-13486] A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This i…
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Executing a manipulation of the argument course_year_section can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
28/06/2026
[CVE-2026-13485] A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an u…
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /preview.php. Performing a manipulation of the argument course_year_section results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57662] Contributor SQL Injection in Contest Gallery <= 30.0.0 versions.
Contributor SQL Injection in Contest Gallery
nvdaltovulnerabilidad CVSS 8.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57663] Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions.
Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57667] Sales Representative SQL Injection in Groundhogg <= 4.5 versions.
Sales Representative SQL Injection in Groundhogg
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57653] Contributor SQL Injection in WP Job Portal <= 2.5.2 versions.
Contributor SQL Injection in WP Job Portal
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57644] Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions.
Contributor SQL Injection in Restaurant Menu by MotoPress
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57636] Contributor SQL Injection in wpForo Forum <= 3.0.9 versions.
Contributor SQL Injection in wpForo Forum
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57642] Contributor SQL Injection in Gallery <= 4.7.8 versions.
Contributor SQL Injection in Gallery
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57643] Contributor SQL Injection in WP Post Author <= 3.9.1 versions.
Contributor SQL Injection in WP Post Author
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57628] Administrator SQL Injection in WP All Import <= 4.0.1 versions.
Administrator SQL Injection in WP All Import
nvdaltovulnerabilidad CVSS 7.6 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
26/06/2026
[CVE-2026-57631] Administrator SQL Injection in Popup box <= 6.0.1 versions.
Administrator SQL Injection in Popup box
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
26/06/2026
[CVE-2026-56064] Subscriber SQL Injection in Tourfic <= 2.22.5 versions.
Subscriber SQL Injection in Tourfic
nvdaltovulnerabilidad CVSS 8.5 NVD
C Alto vulnerabilidad
25/06/2026
[CVE-2026-40083] Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have S…
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through unsanitized unserialize+implode in managers.php. At line 756 of managers.php, the application assigns $selected_items by calling cacti_unserialize(stripslashes(gnrv('selected_graphs_array'))). The cacti_unserialize() function calls unserialize() with allowed_classes set to fal…
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
25/06/2026
[CVE-2026-37149] GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL …
GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost parameter in /grocery/search_products.php. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
25/06/2026
[CVE-2026-54829] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i…
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection. This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.
nvdaltovulnerabilidad CVSS 7.5 NVD