Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2026-84750
CVE-2026-84750MEDIUM
Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Field
33RIESGO
abrir ↗
Referência
CVE-2026-94031
CVE-2026-94031MEDIUM
0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection
33RIESGO
abrir ↗
Referência
CVE-2026-93312
CVE-2026-93312MEDIUM
Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference
33RIESGO
abrir ↗
Referência
CVE-2026-86176
CVE-2026-86176MEDIUM
NetBox through 4.7.0 Information Disclosure via REST and GraphQL APIs
33RIESGO
abrir ↗
Referência
CVE-2026-83543
CVE-2026-83543MEDIUM
Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint
33RIESGO
abrir ↗
Referência
CVE-2026-91024
CVE-2026-91024MEDIUM
Booking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid)
33RIESGO
abrir ↗
Referência
CVE-2016-1593
CVE-2016-1593—
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remot
50RIESGO
abrir ↗
Referência
CVE-2026-108607
CVE-2026-108607MEDIUM
JeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId Parameter
33RIESGO
abrir ↗
Referência
CVE-2016-1596
CVE-2016-1596—
Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authentic
23RIESGO
abrir ↗
Referência
CVE-2026-93977
CVE-2026-93977MEDIUM
code-projects Assessment Management add-single-mark.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2016-1596
CVE-2016-1596—
Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authentic
23RIESGO
abrir ↗
Referência
CVE-2026-93974
CVE-2026-93974MEDIUM
SourceCodester Online Reviewer Management System btn_functions.php remove sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-81654
CVE-2026-81654LOW
NextGEN Gallery < 4.5.0 - Authenticated Plugin Image Settings Update
28RIESGO
abrir ↗
Referência
CVE-2026-47080
CVE-2026-47080LOW
CDATA Section Breakout via Unsanitised ]]> in xml_builder
28RIESGO
abrir ↗
Referência
CVE-2026-15217
CVE-2026-15217HIGH
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
41RIESGO
abrir ↗
Referência
CVE-2026-19919
CVE-2026-19919MEDIUM
code-projects Online Shopping System Login login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-112144
CVE-2026-112144MEDIUM
satya-vinay Events-Management-System project.sql file access
33RIESGO
abrir ↗
Referência
CVE-2026-103538
CVE-2026-103538MEDIUM
ZongXR SuperMarket Order Deletion Endpoint OrderController.java OrderController.deleteOrder missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-112143
CVE-2026-112143MEDIUM
satya-vinay Events-Management-System missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-19889
CVE-2026-19889HIGH
Server-Side Request Forgery (SSRF) in GitLab AI Gateway
41RIESGO
abrir ↗
Referência
CVE-2026-112142
CVE-2026-112142MEDIUM
satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Agares phpAutoVideo 2.21 - Local/Remote File Inclusion
CVE-2007-6615—webappsphp
Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to inc
23RIESGO
abrir ↗
Referência
CVE-2026-103533
CVE-2026-103533LOW
David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal
28RIESGO
abrir ↗
Referência✓ VexDay Proof
ZeusCMS 0.3 - Blind SQL Injection
CVE-2007-6622—webappsphp
SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência★ 1
Original research and PoC for a pre-auth stack buffer overflow via unbounded sscanf scanset in the Netis NC63 ipFilterList handler
CVE-2026-76071CRITICAL
Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter
48RIESGO
abrir ↗
Referência
CVE-2026-4523
CVE-2026-4523LOW
Missing Authorization in GitLab
28RIESGO
abrir ↗
Referência
CVE-2026-102372
CVE-2026-102372MEDIUM
GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector
33RIESGO
abrir ↗
Referência
CVE-2026-77017
CVE-2026-77017HIGH
Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass Assignment
41RIESGO
abrir ↗
Referência
CVE-2026-14196
CVE-2026-14196MEDIUM
WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-13175
CVE-2026-13175MEDIUM
Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR
33RIESGO
abrir ↗
← anteriorpágina 350 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.