Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.957exploits catalogados
32.195CVEs con explotación pública
1932probados en laboratorio
TodosExploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8182Nuclei 4217Metasploit 3462✓ solo verificadosrecientespopularesriesgo
4217 exploits
Nucleicritical
Langflow < 1.9.0 - Remote Code Execution
CVE-2026-33017CRITICALbajo ataque
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
100RIESGO
abrir ↗
Nucleicritical
Nginx UI - Broken Access Control
CVE-2026-33032CRITICAL
Nginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx Takeover
75RIESGO
abrir ↗
Nucleicritical
Mesop AI Sandbox <= 1.2.2 - Remote Code Execution
CVE-2026-33057CRITICAL
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
43RIESGO
abrir ↗
Nucleihigh
XStore Theme < 9.7.3 - SQL Injection
CVE-2026-3326HIGH
XStore < 9.7.3 - Unauthenticated SQLi
56RIESGO
abrir ↗
Nucleicritical
LoLLMs WEBUI - Server-Side Request Forgery
CVE-2026-33340CRITICAL
LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint
48RIESGO
abrir ↗
Nucleicritical
OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization
CVE-2026-33439CRITICAL
Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM
48RIESGO
abrir ↗
Nucleihigh
SiYuan <= v3.6.1 - Path Traversal
CVE-2026-33476HIGH
SiYuan has an Unauthenticated Arbitrary File Read via Path Traversal
36RIESGO
abrir ↗
Nucleihigh
SiYuan <= 3.6.5 - Unauthenticated Path Traversal
CVE-2026-54066HIGH
SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)
36RIESGO
abrir ↗
Nucleihigh
SiYuan Note <= 3.6.5 - Authentication Bypass
CVE-2026-54069CRITICAL
SiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist
43RIESGO
abrir ↗
Nucleimedium
LobeHub LobeChat <= 2.1.56 - Server-Side Request Forgery
CVE-2026-54157CRITICAL
LobeHub: Unauthenticated SSRF in `/webapi/proxy`
43RIESGO
abrir ↗
Nucleimedium
vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak
CVE-2026-54236MEDIUM
vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router
28RIESGO
abrir ↗
Nucleicritical
YMC Filter - SQL Injection
CVE-2026-54836CRITICAL
WordPress Filter & Grids plugin <= 3.11.5 - SQL Injection vulnerability
43RIESGO
abrir ↗
Nucleimedium
Dashy <= 4.3.6 - Reflected XSS via Workspace
CVE-2026-55592LOW
Dashy: XSS in workspace url parameter
23RIESGO
abrir ↗
Nucleimedium
VvvebJs <= 2.0.5 - Cross-Site Scripting
CVE-2026-5615MEDIUM
givanz Vvvebjs File Upload Endpoint upload.php cross site scripting
48RIESGO
abrir ↗
Nucleicritical
Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload
CVE-2026-56290CRITICAL
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0
68RIESGO
abrir ↗
Nucleicritical
Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File Upload
CVE-2026-56291CRITICALbajo ataque
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1
93RIESGO
abrir ↗
Nucleicritical
Gorse < 0.5.10 - Unauthenticated Database Dump
CVE-2026-56782CRITICAL
Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints
63RIESGO
abrir ↗
Nucleicritical
Drag and Drop Multiple File Upload - CF7 <= 1.3.9.6 - Remote Code Execution
CVE-2026-5718HIGH
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass
56RIESGO
abrir ↗
Nucleicritical
Dockwatch <= 0.6.567 - OS Command Injection
CVE-2026-58455CRITICAL
Dockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php
43RIESGO
abrir ↗
Nucleicritical
9Router - Unauthenticated LLM Provider API Exposure
CVE-2026-59801CRITICAL
9Router 0.4.41 - Unauthenticated API Exposure via /api/providers
43RIESGO
abrir ↗
Nucleihigh
AstrBot <= 4.22.1 - Command Injection
CVE-2026-6118MEDIUM
AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection
48RIESGO
abrir ↗
Nucleimedium
User Registration & Membership WordPress plugin - Open Redirect
CVE-2026-6203MEDIUM
User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter
28RIESGO
abrir ↗
Nucleicritical
WordPress Core 6.9-7.0.1 - Pre-Auth Blind SQL Injection (Batch-Route Confusion)
CVE-2026-63030CRITICALbajo ataque
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
100RIESGO
abrir ↗
Nucleicritical
FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution
CVE-2026-6433HIGH
Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCE
56RIESGO
abrir ↗
Nucleicritical
ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE
CVE-2026-6875CRITICAL
Sandbox Escape in ServiceNow AI Platform
63RIESGO
abrir ↗
Nucleimedium
WordPress FluentCRM <= 2.9.87 - Unauthenticated Blind SSRF
CVE-2026-7798MEDIUM
FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter
28RIESGO
abrir ↗
Nucleicritical
Progress ADC LoadMaster - Command Injection
CVE-2026-8037CRITICAL
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
75RIESGO
abrir ↗
Nucleicritical
dotCMS Core Publish Audit API - Unauthenticated SQL Injection
CVE-2026-8054CRITICAL
Unauthenticated SQL Injection in dotCMS Publish Audit API
63RIESGO
abrir ↗
Nucleicritical
WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass
CVE-2026-8181CRITICAL
Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover
68RIESGO
abrir ↗
Nucleimedium
LearnPress < 4.3.7 - Information Disclosure
CVE-2026-8383MEDIUM
LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API
48RIESGO
abrir ↗
← anteriorpágina 118 / 141siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.