Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados
40.392CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.190 exploits
Referência
CVE-2019-5418
CVE-2019-5418HIGHbajo ataque
There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where spe
100RIESGO
abrir ↗
Referência
CVE-2021-47962
CVE-2021-47962MEDIUM
Savsoft Quiz 5.0 Persistent Cross-Site Scripting via User Settings
33RIESGO
abrir ↗
Referência
CVE-2021-47959
CVE-2021-47959HIGH
WordPress Plugin WPGraphQL 1.3.5 Denial of Service
41RIESGO
abrir ↗
Referência
CVE-2021-47958
CVE-2021-47958MEDIUM
CouchCMS 2.2.1 Server-Side Request Forgery via SVG upload
33RIESGO
abrir ↗
Referência
CVE-2018-6892
CVE-2018-6892—
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy
60RIESGO
abrir ↗
Referência
CVE-2018-6892
CVE-2018-6892—
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy
60RIESGO
abrir ↗
Referência
CVE-2018-6892
CVE-2018-6892—
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy
60RIESGO
abrir ↗
Referência
CVE-2026-94278
CVE-2026-94278MEDIUM
File Media Renamer <= 1.3 - Author+ Arbitrary File Rename via save-attachment-compat
33RIESGO
abrir ↗
Referência
CVE-2018-6941
CVE-2018-6941—
A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remot
23RIESGO
abrir ↗
Referência
CVE-2026-89289
CVE-2026-89289MEDIUM
Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint
33RIESGO
abrir ↗
Referência
CVE-2026-67216
CVE-2026-67216HIGH
cJSON cJSON_Compare Exponential Complexity Denial of Service
41RIESGO
abrir ↗
Referência
CVE-2026-67215
CVE-2026-67215HIGH
cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion
41RIESGO
abrir ↗
Referência
CVE-2019-16113
CVE-2019-16113—
Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j
60RIESGO
abrir ↗
Referência
CVE-2019-17558
CVE-2019-17558HIGHbajo ataque
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V
100RIESGO
abrir ↗
Referência
CVE-2026-41924
CVE-2026-41924CRITICAL
WDR201A WiFi Extender OS Command Injection via makeRequest.cgi
48RIESGO
abrir ↗
Referência
CVE-2026-41923
CVE-2026-41923CRITICAL
WDR201A WiFi Extender OS Command Injection via internet.cgi
48RIESGO
abrir ↗
Referência
CVE-2026-105172
CVE-2026-105172MEDIUM
itsourcecode Online Admission System login1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7712
CVE-2026-7712MEDIUM
MindsDB Pickle pickle.loads deserialization
33RIESGO
abrir ↗
Referência
CVE-2026-7711
CVE-2026-7711MEDIUM
MindsDB Engine proc_wrapper.py exec unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-7710
CVE-2026-7710MEDIUM
YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-7788
CVE-2026-7788MEDIUM
Axle-Bucamp MCP-Docusaurus document.py get_content path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7780
CVE-2026-7780MEDIUM
Open5GS smf-registrations Endpoint udm-sm.c udm_state_operational denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-7779
CVE-2026-7779MEDIUM
Open5GS authentication-subscription Endpoint nudr-handler.c udm_nudr_dr_handle_subscription_authentication denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-41927
CVE-2026-41927HIGH
WDR201A WiFi Extender Stack-Based Buffer Overflow via firewall.cgi
41RIESGO
abrir ↗
Referência
CVE-2026-41926
CVE-2026-41926CRITICAL
WDR201A WiFi Extender OS Command Injection via firewall.cgi
48RIESGO
abrir ↗
Referência
CVE-2026-41925
CVE-2026-41925CRITICAL
WDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time)
48RIESGO
abrir ↗
Referência
CVE-2026-41922
CVE-2026-41922CRITICAL
WDR201A WiFi Extender OS Command Injection via wireless.cgi
48RIESGO
abrir ↗
Referência
CVE-2026-7743
CVE-2026-7743MEDIUM
CodeAstro Online Classroom studentdetails sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7742
CVE-2026-7742MEDIUM
CodeAstro Online Classroom facultylogin sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-102616
CVE-2026-102616MEDIUM
risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection
33RIESGO
abrir ↗
← anteriorpágina 316 / 873siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.