Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.020exploits catalogados
35.276CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8604Nuclei 4251Metasploit 3473✓ solo verificadosrecientespopularesriesgo
22.166 exploits
Referência
CVE-2026-15240
CVE-2026-15240HIGH
Customer Switching for WooCommerce < 2.1.3 - Customer+ Privilege Escalation to Administrator via Insecure Operator Resolution
41RIESGO
abrir ↗
Referência
CVE-2026-14924
CVE-2026-14924HIGH
Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification
41RIESGO
abrir ↗
Referência
CVE-2026-12394
CVE-2026-12394CRITICAL
MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator
48RIESGO
abrir ↗
Referência
CVE-2026-12255
CVE-2026-12255HIGH
MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration
41RIESGO
abrir ↗
Referência
CVE-2026-10082
CVE-2026-10082MEDIUM
Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' Parameter
33RIESGO
abrir ↗
Referência
CVE-2025-71408
CVE-2025-71408HIGH
NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments
41RIESGO
abrir ↗
Referência
CVE-2026-63100
CVE-2026-63100HIGH
Maybe 0.6.0 Missing Authorization via HostingsController show/update
41RIESGO
abrir ↗
Referência
CVE-2026-63099
CVE-2026-63099HIGH
TheHive 4.1.24 Broken Object Level Authorization via Attachment Download Endpoints
41RIESGO
abrir ↗
Referência
CVE-2026-63096
CVE-2026-63096MEDIUM
Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint
33RIESGO
abrir ↗
Referência
CVE-2026-63095
CVE-2026-63095HIGH
Dendrite 0.13.8 Improper Authorization via POST account/3pid/delete Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-63094
CVE-2026-63094HIGH
SigNoz < 0.134.0 SSO OAuth State Manipulation Session Token Theft
41RIESGO
abrir ↗
Referência
CVE-2026-16017
CVE-2026-16017MEDIUM
mosaxiv clawlet cron Chat Tool tool_cron.go remove authorization
33RIESGO
abrir ↗
Referência
CVE-2026-16015
CVE-2026-16015MEDIUM
poco-ai poco-claw executor_manager API tasks.py create_task missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-16015
CVE-2026-16015MEDIUM
poco-ai poco-claw executor_manager API tasks.py create_task missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-16015
CVE-2026-16015MEDIUM
poco-ai poco-claw executor_manager API tasks.py create_task missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-16015
CVE-2026-16015MEDIUM
poco-ai poco-claw executor_manager API tasks.py create_task missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-16014
CVE-2026-16014MEDIUM
code-projects Hospital Bed Management System Login Form sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-16013
CVE-2026-16013MEDIUM
liftoff-sr CIPster cipepath.cc deserialize_symbolic out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-15510
CVE-2026-15510MEDIUM
Leantime API saveSetting improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-15478
CVE-2026-15478MEDIUM
IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-15475
CVE-2026-15475MEDIUM
MiniTool Partition Wizard Signed Kernel Driver pwdrvio.sys access control
33RIESGO
abrir ↗
Referência
CVE-2026-14746
CVE-2026-14746MEDIUM
code-projects Real State Services addprojectrent.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14745
CVE-2026-14745MEDIUM
code-projects Real State Services single-list_rent.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14738
CVE-2026-14738MEDIUM
exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hash
33RIESGO
abrir ↗
Referência
CVE-2026-14737
CVE-2026-14737MEDIUM
Hanwang e-Face General Management Platform querySysAuthStr.do sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14736
CVE-2026-14736MEDIUM
Ruijie RG-UAC user_auth_commit.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-14731
CVE-2026-14731MEDIUM
itsourcecode Hospital Management System patientreport.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14730
CVE-2026-14730MEDIUM
itsourcecode Hospital Management System patientprofile.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14722
CVE-2026-14722MEDIUM
tiddly-gittly TidGi-Desktop Git Repository Import loadWikiTiddlersWithSubWikis.ts code injection
33RIESGO
abrir ↗
Referência
CVE-2026-14635
CVE-2026-14635MEDIUM
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversal
33RIESGO
abrir ↗
← anteriorpágina 357 / 739siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.