Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.150exploits catalogados
39.601CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.629Exploit-DB 24.485GitHub PoC 16.343VulnCheck XDB 9680Nuclei 4488Metasploit 3525✓ solo verificadosrecientespopularesriesgo
4488 exploits
Nucleicritical
cve-search 4.0-6.0.0 - Unauthenticated NoSQL Injection
CVE-2026-59509CRITICAL
Unauthenticated arbitrary MongoDB collection read in cve-search
63RIESGO
abrir ↗
Nucleicritical
ruflo MCP Bridge - Unauthenticated RCE via terminal_execute
CVE-2026-59726CRITICAL
Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment
63RIESGO
abrir ↗
Nucleicritical
Gitea 1.22.1-1.27.0 - Unauthenticated Arbitrary File Read
CVE-2026-59774CRITICAL
Gitea Org-mode file disclosure and code execution
68RIESGO
abrir ↗
Nucleicritical
9Router - Unauthenticated LLM Provider API Exposure
CVE-2026-59801CRITICAL
9Router 0.4.41 - Unauthenticated API Exposure via /api/providers
43RIESGO
abrir ↗
Nucleicritical
Gitea <= 1.27.0 - Pre-Auth Remote Code Execution
CVE-2026-60004CRITICALbajo ataque
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RIESGO
abrir ↗
Nucleihigh
Monsta FTP <= 2.14.4 - Unauthenticated SSRF via IPv6 Blocklist Bypass
CVE-2026-60105HIGH
Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass
56RIESGO
abrir ↗
Nucleihigh
AstrBot <= 4.22.1 - Command Injection
CVE-2026-6118MEDIUM
AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection
48RIESGO
abrir ↗
Nucleicritical
vBulletin 6.x - Remote Code Execution
CVE-2026-61511CRITICAL
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
63RIESGO
abrir ↗
Nucleicritical
GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access
CVE-2026-61560CRITICAL
@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
43RIESGO
abrir ↗
Nucleihigh
LightRAG <= 1.5.3 - Credentialed CORS Wildcard
CVE-2026-61736CRITICAL
LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests
43RIESGO
abrir ↗
Nucleihigh
LightRAG <= 1.5.4 - Missing Authentication
CVE-2026-61808CRITICAL
LightRAG: Missing Authentication for Critical API Functions in Default Configuration
43RIESGO
abrir ↗
Nucleimedium
User Registration & Membership WordPress plugin - Open Redirect
CVE-2026-6203MEDIUM
User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter
28RIESGO
abrir ↗
Nucleimedium
PasswordPusher v1.45.11-v2.9.5 - Unauthenticated Anonymous Push Deletion via Ownership Bypass
CVE-2026-62382MEDIUM
PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison
48RIESGO
abrir ↗
Nucleicritical
WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion
CVE-2026-63030CRITICALbajo ataque
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RIESGO
abrir ↗
Nucleicritical
JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution
CVE-2026-63077CRITICALbajo ataqueransomware
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin
100RIESGO
abrir ↗
Nucleihigh
FileGator < 7.14.2 - Privilege Escalation
CVE-2026-63358HIGH
FileGator privilege escalation
36RIESGO
abrir ↗
Nucleihigh
Next4Biz CSM - Arbitrary File Read via DownloadFileHandler
CVE-2026-6377HIGH
Path Traversal in Next4Biz's CSM (Customer Service Management)
36RIESGO
abrir ↗
Nucleicritical
FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution
CVE-2026-6433HIGH
Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCE
56RIESGO
abrir ↗
Nucleihigh
WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)
CVE-2026-64638HIGH
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malici
56RIESGO
abrir ↗
Nucleicritical
MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass
CVE-2026-64849CRITICALbajo ataque
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
93RIESGO
abrir ↗
Nucleihigh
FormCraft3 <= 3.9.15 - Server-Side Request Forgery
CVE-2026-65442HIGH
WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability
36RIESGO
abrir ↗
Nucleihigh
Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File Read
CVE-2026-65694HIGH
Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController
56RIESGO
abrir ↗
Nucleihigh
GEO my WP <=4.5.5.3 - Unauthenticated Local File Inclusion
CVE-2026-85200HIGH
GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion
36RIESGO
abrir ↗
Nucleicritical
TEN Framework - Arbitrary File Read & Write
CVE-2026-85688CRITICAL
TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer
43RIESGO
abrir ↗
Nucleicritical
GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read
CVE-2026-85706CRITICALbajo ataque
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RIESGO
abrir ↗
Nucleicritical
N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing
CVE-2026-86206MEDIUM
Access control filter bypass allows unauthorised access to APIs
28RIESGO
abrir ↗
Nucleicritical
N-able N-central - Authentication Bypass
CVE-2026-86207HIGH
Authentication bypass leads to unauthorised access to N-central
36RIESGO
abrir ↗
Nucleicritical
N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code Execution
CVE-2026-86218CRITICALbajo ataque
pre-authentication remote code execution
98RIESGO
abrir ↗
Nucleihigh
Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch
CVE-2026-86242HIGH
Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds
36RIESGO
abrir ↗
Nucleicritical
LibreNMS <= 26.7.0 - Unauthenticated API Access
CVE-2026-86426CRITICAL
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
43RIESGO
abrir ↗
← anteriorpágina 115 / 150siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.