Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.095 exploits
Referência
CVE-2016-7255
CVE-2016-7255HIGHbajo ataqueransomware
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
93RIESGO
abrir ↗
Referência
CVE-2026-42284
CVE-2026-42284HIGH
GitPython: Unsafe option check validates multi_options before shlex.split transforms it
41RIESGO
abrir ↗
Referência
CVE-2026-8083
CVE-2026-8083MEDIUM
SourceCodester Pharmacy Sales and Inventory System ajax.php save_user sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-11646
CVE-2018-11646—
webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFavicon
50RIESGO
abrir ↗
Referência
CVE-2026-77988
CVE-2026-77988MEDIUM
TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection
33RIESGO
abrir ↗
Referência
CVE-2010-5299
CVE-2010-5299—
Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f
50RIESGO
abrir ↗
Referência
CVE-2014-5345
CVE-2014-5345—
Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress al
23RIESGO
abrir ↗
Referência
CVE-2026-56769
CVE-2026-56769MEDIUM
Huly Platform - Server-Side Request Forgery via /import Endpoint
33RIESGO
abrir ↗
Referência
CVE-2026-15622
CVE-2026-15622MEDIUM
poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization
33RIESGO
abrir ↗
Referência
CVE-2026-11964
CVE-2026-11964CRITICAL
User Registration & Membership < 5.2.2 - Unauthenticated PayPal Webhook Signature Verification Bypass Leading to Membership Activation
48RIESGO
abrir ↗
Referência
CVE-2010-3024
CVE-2010-3024—
Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly e
23RIESGO
abrir ↗
Referência
CVE-2026-10086
CVE-2026-10086HIGH
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
41RIESGO
abrir ↗
Referência
CVE-2011-4572
CVE-2011-4572—
Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably
23RIESGO
abrir ↗
Referência
CVE-2016-6283
CVE-2016-6283—
Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência
CVE-2016-6433
CVE-2016-6433—
The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users
60RIESGO
abrir ↗
Referência
CVE-2026-12081
CVE-2026-12081MEDIUM
Database for Contact Form 7, WPforms, Elementor forms < 1.5.2 - Unauthenticated PHP Object Injection via Entry File Field
33RIESGO
abrir ↗
Referência
CVE-2026-10824
CVE-2026-10824MEDIUM
Masteriyo LMS < 2.2.1 - Unauthenticated Course Progress Disclosure and Deletion
33RIESGO
abrir ↗
Referência
CVE-2018-16763
CVE-2018-16763—
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RIESGO
abrir ↗
Referência
CVE-2026-12673
CVE-2026-12673MEDIUM
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalati
33RIESGO
abrir ↗
Referência✓ VexDay Proof
MDaemon POP3 Server < 9.06 - 'USER' Remote Buffer Overflow (PoC)
CVE-2006-4364—doswindows
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attacker
35RIESGO
abrir ↗
Referência
CVE-2026-12781
CVE-2026-12781HIGH
EaseUS Partition Master Kernel Driver epmntdrv.sys access control
41RIESGO
abrir ↗
Referência
CVE-2026-8157
CVE-2026-8157HIGH
Vitepos < 3.4.2 - Outlet Manager+ Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2026-7859
CVE-2026-7859MEDIUM
Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media
33RIESGO
abrir ↗
Referência
CVE-2018-17775
CVE-2018-17775—
Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local us
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ITechBids 5.0 - 'item_id' SQL Injection
CVE-2008-0692—webappsphp
SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2026-7605
CVE-2026-7605MEDIUM
JeecgBoot uploadImgByHttpEndpoint CommonController.java HttpFileToMultipartFileUtil.downloadImageData server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-7603
CVE-2026-7603MEDIUM
JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-7602
CVE-2026-7602MEDIUM
JeecgBoot FillRuleUtil edit improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-7030
CVE-2026-7030HIGH
Tenda F456 RouteStatic fromRouteStatic buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5337
CVE-2026-5337MEDIUM
Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR
33RIESGO
abrir ↗
← anteriorpágina 263 / 870siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.