Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados

40.392CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.190 exploits

Referência

CVE-2017-12786

CVE-2017-12786—

Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW40

28RIESGO

abrir ↗

Referência

CVE-2017-14153

CVE-2017-14153—

This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must

23RIESGO

abrir ↗

Referência

CVE-2020-37168

CVE-2020-37168CRITICAL

Ecommerce Systempay 1.0 Production Key Brute Force

48RIESGO

abrir ↗

Referência

CVE-2017-14798

CVE-2017-14798HIGH

local privilege escalation in SUSE postgresql init script

41RIESGO

abrir ↗

Referência

Anuko Time Tracker 1.19.23.5325 - CSV/Formula Injection

CVE-2020-15255HIGHwebappsphp

CSV injection in Anuko Time Tracker

41RIESGO

abrir ↗

Referência

CVE-2005-2428

CVE-2005-2428—

Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hid

60RIESGO

abrir ↗

Referência

CVE-2026-8207

CVE-2026-8207HIGH

Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/gr

41RIESGO

abrir ↗

Referência

CVE-2021-47929

CVE-2021-47929MEDIUM

WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2021-47928

CVE-2021-47928HIGH

Opencart TMD Vendor System 3.x Blind SQL Injection via product route

41RIESGO

abrir ↗

Referência

CVE-2021-47923

CVE-2021-47923CRITICAL

OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie

48RIESGO

abrir ↗

Referência

CVE-2011-5204

CVE-2011-5204—

Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading fr

23RIESGO

abrir ↗

Referência

CVE-2017-14839

CVE-2017-14839—

TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.

23RIESGO

abrir ↗

Referência

CVE-2026-90801

CVE-2026-90801MEDIUM

GNU Binutils ld cache.c cache_bwrite buffer overflow

33RIESGO

abrir ↗

Referência

CVE-2026-14607

CVE-2026-14607MEDIUM

RT-Thread lwp_syscall.c sys_getaddrinfo memory corruption

33RIESGO

abrir ↗

Referência

CVE-2018-15844

CVE-2018-15844—

An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's pas

23RIESGO

abrir ↗

Referência

CVE-2026-103543

CVE-2026-103543MEDIUM

itsourcecode Leave Management System controller.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-16484

CVE-2026-16484MEDIUM

SourceCodester Class and Exam Timetabling System edit_subjecta.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-42881

CVE-2026-42881HIGH

STIGQter: Arbitrary File Write leading to Local Code Execution via Export HTML

41RIESGO

abrir ↗

Referência

CVE-2026-43644

CVE-2026-43644MEDIUM

podinfo 6.11.2 Reflected XSS via /echo Endpoint

33RIESGO

abrir ↗

Referência

CVE-2026-13569

CVE-2026-13569MEDIUM

weng-xianhu EyouCMS API index.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2021-47952

CVE-2021-47952CRITICAL

python jsonpickle 2.0.0 Remote Code Execution via py/repr

48RIESGO

abrir ↗

Referência

CVE-2021-47934

CVE-2021-47934MEDIUM

MyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRF

33RIESGO

abrir ↗

Referência

CVE-2026-8082

CVE-2026-8082HIGH

Bpost Shipping Platform < 3.2.3 - Unauthenticated SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2020-37247

CVE-2020-37247HIGH

Kite 4.2.0.1 U1 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2011-5207

CVE-2011-5207—

Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1

23RIESGO

abrir ↗

Referência

CVE-2015-2216

CVE-2015-2216—

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to exec

23RIESGO

abrir ↗

Referência

CVE-2020-37246

CVE-2020-37246MEDIUM

WordPress Plugin Supsystic Backup 2.3.9 Local File Inclusion

33RIESGO

abrir ↗

Referência

CVE-2020-37245

CVE-2020-37245HIGH

WordPress Plugin Supsystic Digital Publications 1.6.9 Path Traversal XSS

41RIESGO

abrir ↗

Referência

CVE-2020-37240

CVE-2020-37240MEDIUM

Queue Management System 4.0.0 Stored XSS via Add User

33RIESGO

abrir ↗

Referência

CVE-2026-13147

CVE-2026-13147CRITICAL

Kirki < 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis

63RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.