Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.989exploits catalogados
40.450CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.042VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2026-15385
CVE-2026-15385MEDIUM
RT Mega Menu < 1.5.2 - Subscriber+ Stored XSS via Menu Item CSS
33RIESGO
abrir ↗
Referência
CVE-2026-103090
CVE-2026-103090HIGH
Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)
41RIESGO
abrir ↗
Referência
CVE-2026-110691
CVE-2026-110691MEDIUM
WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update
33RIESGO
abrir ↗
Referência
CVE-2026-106002
CVE-2026-106002MEDIUM
Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion
33RIESGO
abrir ↗
Referência
CVE-2026-105997
CVE-2026-105997MEDIUM
Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient
33RIESGO
abrir ↗
Referência
CVE-2013-20009
CVE-2013-20009MEDIUM
Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-116471
CVE-2026-116471MEDIUM
BKWLD Decoy Authorization Policy Policy.php privileges management
33RIESGO
abrir ↗
Referência
CVE-2026-117509
CVE-2026-117509MEDIUM
crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-116461
CVE-2026-116461MEDIUM
Omega Solution Restro POS sale-invoice logic error
33RIESGO
abrir ↗
Referência
CVE-2026-116385
CVE-2026-116385MEDIUM
Bdtask Garage 24 Garage Management Software Profile edit_profile cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-116384
CVE-2026-116384MEDIUM
Bdtask Garage 24 Garage Management Software Backend improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-116370
CVE-2026-116370MEDIUM
2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion
33RIESGO
abrir ↗
Referência
CVE-2010-20125
CVE-2010-20125HIGH
DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php
41RIESGO
abrir ↗
Referência
CVE-2026-117572
CVE-2026-117572MEDIUM
WP Visitor Statistics (Real Time Traffic) < 8.8 - Admin+ SQLi via 'order' Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-117571
CVE-2026-117571HIGH
WP Visitor Statistics (Real Time Traffic) < 8.8 - Unauthenticated Stored XSS via Tracker Device Parameters
41RIESGO
abrir ↗
Referência
CVE-2026-90581
CVE-2026-90581MEDIUM
cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection
33RIESGO
abrir ↗
Referência
CVE-2026-86231
CVE-2026-86231MEDIUM
mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation
33RIESGO
abrir ↗
Referência
CVE-2026-71509
CVE-2026-71509HIGH
Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-71508
CVE-2026-71508HIGH
Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-16612
CVE-2026-16612MEDIUM
FiboSearch < 1.34.1 - Unauthenticated Password-Protected Product Information Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-76584
CVE-2026-76584CRITICAL
TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2026-92927
CVE-2026-92927MEDIUM
SourceCodester Drug Recommendation System drug_recommendor.sql information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-85129
CVE-2026-85129HIGH
Hoo Companion 1.0.2 - Unauthenticated Stored XSS via Theme Settings Import
41RIESGO
abrir ↗
Referência
CVE-2026-16600
CVE-2026-16600HIGH
SmartAIPress <= 1.2.0 - Subscriber+ Server-Side Request Forgery via smartaipress_openai_upload_and_set_featured_image
41RIESGO
abrir ↗
Referência
CVE-2017-0145
CVE-2017-0145HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2018-15535
CVE-2018-15535—
/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname
50RIESGO
abrir ↗
Referência
CVE-2019-0803
CVE-2019-0803HIGHbajo ataqueransomware
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
83RIESGO
abrir ↗
Referência
CVE-2019-13344
CVE-2019-13344—
An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthent
35RIESGO
abrir ↗
Referência
CVE-2020-1147
CVE-2020-1147HIGHbajo ataque
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar
100RIESGO
abrir ↗
Referência
CVE-2020-1147
CVE-2020-1147HIGHbajo ataque
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar
100RIESGO
abrir ↗
← anteriorpágina 330 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.