Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.600exploits catalogados

39.734CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.742Exploit-DB 24.486GitHub PoC 16.618VulnCheck XDB 9736Nuclei 4493Metasploit 3525✓ solo verificadosrecientes populares riesgo

4493 exploits

Nucleihigh

Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure

CVE-2026-42221HIGH

nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim

56RIESGO

abrir ↗

Nucleicritical

LiteLLM - Command Injection

CVE-2026-42271HIGHbajo ataque

LiteLLM: Authenticated command execution via MCP stdio test endpoints

100RIESGO

abrir ↗

Nucleicritical

MagicMirror <= 2.35.0 - Server-Side Request Forgery

CVE-2026-42281CRITICAL

MagicMirror²: Unauthenticated SSRF via /cors endpoint

43RIESGO

abrir ↗

Nucleihigh

Arcane < 1.18.0 - Unauthenticated Template and Env Disclosure

CVE-2026-42461HIGH

Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets)

36RIESGO

abrir ↗

Nucleicritical

phpVMS < 7.0.6 - Legacy Importer Authorization Bypass

CVE-2026-42569CRITICAL

phpvms: /importer authorization bypass causing full database wipe

43RIESGO

abrir ↗

Nucleicritical

WordPress Contact Form by Supsystic - Server-Side Template Injection

CVE-2026-4257CRITICAL

Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality

75RIESGO

abrir ↗

Nucleicritical

Gotenberg - Command Injection

CVE-2026-42589CRITICAL

Gotenberg: Unauthenticated RCE via ExifTool Metadata Key Injection

63RIESGO

abrir ↗

Nucleicritical

Gotenberg < 8.31.0 - Server-Side Request Forgery

CVE-2026-42596CRITICAL

Gotenberg: Unauthenticated SSRF via default deny-list bypass in downloadFrom and webhook

43RIESGO

abrir ↗

Nucleicritical

JoomSport <= 5.7.7 - SQL Injection

CVE-2026-42647CRITICAL

WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability

63RIESGO

abrir ↗

Nucleicritical

Arelle < 2.39.10 - Remote Code Execution

CVE-2026-42796CRITICAL

Arelle < 2.39.10 Unauthenticated RCE via /rest/configure

43RIESGO

abrir ↗

Nucleimedium

FacturaScripts - Unauthenticated phpinfo Disclosure

CVE-2026-42878MEDIUM

FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScripts

28RIESGO

abrir ↗

Nucleihigh

Kirby CMS 5.3.0-5.4.0 - Path Traversal

CVE-2026-44177HIGH

Kirby: Pre-authentication path traversal and PHP file inclusion during user lookup

36RIESGO

abrir ↗

Nucleicritical

Scramble Laravel - Remote Code Execution

CVE-2026-44262CRITICAL

Scramble: Remote code execution via evaluation of user-controlled input in validation rules

63RIESGO

abrir ↗

Nucleihigh

PraisonAI - Authentication Bypass

CVE-2026-44338HIGH

PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

56RIESGO

abrir ↗

Nucleicritical

WGDashboard < 4.3.2 - Unauthenticated File Read

CVE-2026-44343CRITICAL

WGDashboard: Critical Vulnerability in 4.3.2

43RIESGO

abrir ↗

Nucleimedium

MISP < 2.5.37 - SQL Injection

CVE-2026-44381CRITICAL

MISP: SQL injection via unvalidated ordering parameters in event and shadow attribute listings

43RIESGO

abrir ↗

Nucleicritical

Open WebUI 'LDAP Empty Password' - Authentication Bypass

CVE-2026-44551CRITICAL

Open WebUI: LDAP Empty Password Authentication Bypass

43RIESGO

abrir ↗

Nucleihigh

Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials

CVE-2026-44825HIGH

Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users

56RIESGO

abrir ↗

Nucleihigh

Dozzle - Server Side Request Forgery

CVE-2026-45298HIGH

Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)

36RIESGO

abrir ↗

Nucleihigh

Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure

CVE-2026-45332HIGH

Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint

56RIESGO

abrir ↗

Nucleimedium

Open WebUI < 0.9.5 - Information Disclosure

CVE-2026-45397MEDIUM

Open WebUI: Unauthenticated RAG Configuration Disclosure

28RIESGO

abrir ↗

Nucleicritical

Kopia Server 0.23.0 - Remote Code Execution

CVE-2026-45695CRITICAL

Kopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used

43RIESGO

abrir ↗

Nucleicritical

Cockpit Web Console < 360 - Remote Code Execution

CVE-2026-4631CRITICAL

Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection

63RIESGO

abrir ↗

Nucleicritical

9Router <= 0.4.36 - Unauthenticated RCE

CVE-2026-46339CRITICAL

9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

63RIESGO

abrir ↗

Nucleicritical

phpMyFAQ <= 4.1.1 - SQL Injection

CVE-2026-46364CRITICAL

phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha

43RIESGO

abrir ↗

Nucleihigh

SillyTavern - Server-Side Request Forgery

CVE-2026-46372HIGH

SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

36RIESGO

abrir ↗

Nucleicritical

Flowise < 3.1.2 - node-custom-function Unauthorized RCE

CVE-2026-46442CRITICAL

Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

63RIESGO

abrir ↗

Nucleicritical

YesWiki < 4.6.4 - Unauthenticated SQL Injection

CVE-2026-46670CRITICAL

YesWiki: Unauthenticated SQL Injection

43RIESGO

abrir ↗

Nucleicritical

TYPO3 ceselector Extension - Insecure Deserialization

CVE-2026-46725CRITICAL

Remote Code Execution in extension "Content Element Selector" (ceselector)

43RIESGO

abrir ↗

Nucleicritical

DbGate - Remote Code Execution via Anonymous JWT

CVE-2026-47668CRITICAL

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

63RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.