Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,093
Total alertas
4671
Críticas
16834
Altas
8
Ransomware
1017
Esta semana
RSS
cwe-89 × 30 días × Limpiar todo ×
M Alto vulnerabilidad
30/09/2026
[CVE-2026-96345] Administrator SQL Injection in Estatik <= 4.3.5 versions.
Administrator SQL Injection in Estatik
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
30/09/2026
[CVE-2026-96346] Author SQL Injection in WP ERP <= 1.17.9 versions.
Author SQL Injection in WP ERP
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
30/09/2026
[CVE-2026-94177] Unauthenticated SQL Injection in GamiPress <= 8.0.2 versions.
Unauthenticated SQL Injection in GamiPress
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
30/09/2026
[CVE-2026-94082] Author SQL Injection in Quiz Cat <= 3.1.1 versions.
Author SQL Injection in Quiz Cat
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
30/09/2026
[CVE-2026-94115] Contributor SQL Injection in Easy Pricing Tables <= 4.1.2 versions.
Contributor SQL Injection in Easy Pricing Tables
nvdaltovulnerabilidad CVSS 8.5 NVD
M Alto vulnerabilidad
30/09/2026
[CVE-2026-93621] Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions.
Unauthenticated SQL Injection in WP Data Access
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
30/09/2026
[CVE-2026-62085] Administrator SQL Injection in WP Activity Log <= 5.6.6 versions.
Administrator SQL Injection in WP Activity Log
nvdaltovulnerabilidad CVSS 7.6 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
30/09/2026
[CVE-2026-6806] The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-…
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stm_lat/stm_lng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additio…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
30/09/2026
[CVE-2026-102913] A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impa…
A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_enrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
30/09/2026
[CVE-2026-102910] A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The aff…
A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/examproper/exam-delete.php. The manipulation of the argument test_id results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
30/09/2026
[CVE-2026-102908] A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue a…
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
30/09/2026
[CVE-2026-102909] A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is …
A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/examproper/btn_functions.php. The manipulation of the argument access_code leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-72507] The "reportType" parameter in the product summary report feature within the balancing reports sectio…
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability.
nvdcriticovulnerabilidad CVSS 9.0 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-72510] The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-bas…
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.
nvdcriticovulnerabilidad CVSS 9.0 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-68954] The "pattern" parameter used in search function in the home page of the TMS application is vulnerabl…
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability.
nvdcriticovulnerabilidad CVSS 9.0 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-68068] The "screenID" parameter in the electronic transaction queue viewer feature within the manual transa…
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability.
nvdcriticovulnerabilidad CVSS 9.0 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-63713] The "search" parameter in the view audit logs feature within the utilities section is susceptible to…
The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability.
nvdcriticovulnerabilidad CVSS 9.0 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-102616] A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function g…
A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file CustomHistoricProcessServiceImpl.java of the component OAuth2 Resource Filter. Performing a manipulation of the argument year/processInstanceId results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The sink is in…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2023-54400] Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that al…
Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getEmpByname action without any authentication. Attackers can exploit UNION-based SQL injection techniques against the Microsoft SQL Server backend to extract, disclose, and modify database contents, with…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-102491] A vulnerability was identified in mahonelau kykms up to 8f130c2d85842d5b44caae78cc46d65e505949f7. Th…
A vulnerability was identified in mahonelau kykms up to 8f130c2d85842d5b44caae78cc46d65e505949f7. The impacted element is the function QueryGenerator.doMultiFieldsOrder of the file QueryGenerator.java of the component SqlInjectionUtil. The manipulation of the argument column leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. …
nvdaltovulnerabilidad CVSS 7.3 NVD