Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.240 exploits

Referência

CVE-2015-6589

CVE-2015-6589—

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before

28RIESGO

abrir ↗

Referência

CVE-2026-108612

CVE-2026-108612MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch

33RIESGO

abrir ↗

Referência

CVE-2026-8235

CVE-2026-8235MEDIUM

8421bit MiniClaw System kernel.ts resolveSkillScriptPath os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8229

CVE-2026-8229MEDIUM

Wavlink NU516U1 wireless.cgi WifiBasic os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8228

CVE-2026-8228MEDIUM

Wavlink NU516U1 wireless.cgi advance os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8227

CVE-2026-8227MEDIUM

Wavlink NU516U1 adm.cgi wzdapMesh os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8226

CVE-2026-8226MEDIUM

Open5GS types.c ogs_pcc_rule_install_flow_from_media denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8225

CVE-2026-8225MEDIUM

Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8195

CVE-2026-8195MEDIUM

JeecgBoot SVG File CommonController.java cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-8190

CVE-2026-8190MEDIUM

Wavlink NU516U1 adm.cgi wan os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8209

CVE-2026-8209MEDIUM

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction

33RIESGO

abrir ↗

Referência

CVE-2026-18853

CVE-2026-18853MEDIUM

ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal

33RIESGO

abrir ↗

Referência

CVE-2016-2385

CVE-2016-2385—

Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER a

28RIESGO

abrir ↗

Referência

CVE-2016-3672

CVE-2016-3672—

The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize t

23RIESGO

abrir ↗

Referência

CVE-2019-12372

CVE-2019-12372—

Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.

23RIESGO

abrir ↗

Referência

CVE-2026-74899

CVE-2026-74899CRITICAL

openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy

48RIESGO

abrir ↗

Referência

CVE-2026-20000

CVE-2026-20000MEDIUM

itsourcecode Hospital Management System viewprescriptionrecord.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2017-17635

CVE-2017-17635—

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eve

23RIESGO

abrir ↗

Referência

CVE-2026-75012

CVE-2026-75012HIGH

TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference

41RIESGO

abrir ↗

Referência

CVE-2017-17636

CVE-2017-17636—

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-75011

CVE-2026-75011MEDIUM

kylecui NetForensicMCP index.js execAsync command injection

33RIESGO

abrir ↗

Referência

CVE-2015-7858

CVE-2015-7858—

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un

60RIESGO

abrir ↗

Referência

CVE-2015-7889

CVE-2015-7889—

The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions f

23RIESGO

abrir ↗

Referência

CVE-2013-7025

CVE-2013-7025—

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell So

23RIESGO

abrir ↗

Referência

CVE-2016-3081

CVE-2016-3081HIGHbajo ataque

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, a

100RIESGO

abrir ↗

Referência

CVE-2026-71503

CVE-2026-71503MEDIUM

Dolibarr < 24.0.0 Reflected XSS via Extra Fields Administration Template

33RIESGO

abrir ↗

Referência

CVE-2026-17010

CVE-2026-17010MEDIUM

Saitama Addon Pack <= 1.0.8 - Contributor+ Stored XSS via Post Meta

33RIESGO

abrir ↗

Referência

CVE-2026-77003

CVE-2026-77003LOW

Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask

28RIESGO

abrir ↗

Referência

CVE-2026-16959

CVE-2026-16959MEDIUM

Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector

48RIESGO

abrir ↗

Referência

CVE-2026-16988

CVE-2026-16988HIGH

GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.