Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.035exploits catalogados

39.531CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientes populares riesgo

4478 exploits

Nucleihigh

MLflow <= 3.9.0 - Arbitrary File Read

CVE-2026-2614HIGH

Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

36RIESGO

abrir ↗

Nucleicritical

Milvus - Unauthenticated Metrics API Access

CVE-2026-26190CRITICAL

Milvus Allows Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

63RIESGO

abrir ↗

Nucleicritical

Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter

CVE-2026-26216CRITICAL

Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter

63RIESGO

abrir ↗

Nucleicritical

Crawl4AI < 0.8.0 - Local File Inclusion

CVE-2026-26217CRITICAL

Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling

43RIESGO

abrir ↗

Nucleihigh

Discourse - Private User Field Disclosure via Directory Items IDOR

CVE-2026-26265HIGH

Discourse has IDOR vulnerability in the directory items endpoint

36RIESGO

abrir ↗

Nucleihigh

Tattile Camera < 1.181.5 - Default Login

CVE-2026-26341CRITICAL

Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials

63RIESGO

abrir ↗

Nucleihigh

MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes

CVE-2026-2652HIGH

Authentication Bypass in mlflow/mlflow

36RIESGO

abrir ↗

Nucleicritical

Ghost CMS Content API - SQL Injection

CVE-2026-26980CRITICAL

Ghost has a SQL Injection in its Content API

63RIESGO

abrir ↗

Nucleicritical

Progress ShareFile Storage Zones Controller - Authentication Bypass

CVE-2026-2699CRITICAL

EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

63RIESGO

abrir ↗

Nucleicritical

MajorDoMo - Unauthenticated RCE

CVE-2026-27174CRITICAL

MajorDoMo Unauthenticated Remote Code Execution via Admin Console Eval

63RIESGO

abrir ↗

Nucleimedium

MajorDoMo - Cross-Site Scripting

CVE-2026-27176MEDIUM

MajorDoMo Reflected Cross-Site Scripting in command.php

28RIESGO

abrir ↗

Nucleimedium

Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass

CVE-2026-27454MEDIUM

Discourse has check revision visibility on posts endpoint

28RIESGO

abrir ↗

Nucleihigh

MindsDB - Remote Code Execution

CVE-2026-27483HIGH

MindsDB has Path Traversal in /api/files Leading to Remote Code Execution

56RIESGO

abrir ↗

Nucleicritical

WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation

CVE-2026-27542CRITICAL

WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability

63RIESGO

abrir ↗

Nucleicritical

FOSSBilling 0.5.4-0.7.x - Unauthenticated System API Role Authorization Bypass

CVE-2026-27604CRITICAL

FOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin Functions

43RIESGO

abrir ↗

Nucleimedium

Changedetection.io RSS Single Watch - Cross-Site Scripting

CVE-2026-27645MEDIUM

changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response

28RIESGO

abrir ↗

Nucleihigh

OpenCATS - Command Injection

CVE-2026-27760CRITICAL

OpenCATS PHP Code Injection via installer AJAX endpoint

63RIESGO

abrir ↗

Nucleihigh

Gitea Container Registry - Unauthorized Private Image Access

CVE-2026-27771HIGH

Gitea Composer package source links use insufficient permission checks

56RIESGO

abrir ↗

Nucleimedium

Homarr < 1.54.0 - Information Disclosure

CVE-2026-27796MEDIUM

Homarr: Unauthenticated Information Disclosure (Integration Metadata Leak)

28RIESGO

abrir ↗

Nucleihigh

mcp-atlassian < 0.17.0 - Server-Side Request Forgery

CVE-2026-27826HIGH

MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers

36RIESGO

abrir ↗

Nucleihigh

Piwigo < 16.3.0 - Unauthenticated Information Disclosure via History API

CVE-2026-27833HIGH

Piwigo: Unauthenticated Information Disclosure via pwg.history.search API

36RIESGO

abrir ↗

Nucleihigh

Discourse < 2026.1.2/2026.2.1/2026.3.0-latest.1 - Unauthenticated Private User Action Disclosure

CVE-2026-27934HIGH

Discourse leaks private topic title and post excerpt via user action API endpoint

36RIESGO

abrir ↗

Nucleicritical

Nginx UI < 2.3.3 - Information Disclosure

CVE-2026-27944CRITICAL

Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure

63RIESGO

abrir ↗

Nucleicritical

OpenCTI < 6.9.13 - Authentication Bypass via User Impersonation

CVE-2026-27960CRITICAL

OpenCTI privilege escalation and unauthenticated access via default admin account

43RIESGO

abrir ↗

Nucleicritical

Qwik - Unauthenticated RCE via server$ Deserialization

CVE-2026-27971CRITICAL

Qwik affected by unauthenticated RCE via server$ Deserialization

63RIESGO

abrir ↗

Nucleihigh

NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting

CVE-2026-28141HIGH

WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability

36RIESGO

abrir ↗

Nucleimedium

Vite Dev Server - Path Traversal in Optimized Deps .map Handling

CVE-2026-39365MEDIUM

Vite has a Path Traversal in Optimized Deps `.map` Handling

28RIESGO

abrir ↗

Nucleihigh

Meta Box <= 5.11.1 - Arbitrary File Deletion

CVE-2026-39468MEDIUM

WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability

28RIESGO

abrir ↗

Nucleicritical

Fortinet FortiSandbox - Command Injection

CVE-2026-39808CRITICALbajo ataque

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F

100RIESGO

abrir ↗

Nucleimedium

XWiki - Cross-Site Scripting

CVE-2026-40105MEDIUM

XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionality

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.