Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.020exploits catalogados

35.276CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8604Nuclei 4251Metasploit 3473✓ solo verificadosrecientes populares riesgo

22.166 exploits

Referência

CVE-2026-13503

CVE-2026-13503MEDIUM

antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-13502

CVE-2026-13502LOW

antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObject toctou

28RIESGO

abrir ↗

Referência

CVE-2026-13501

CVE-2026-13501MEDIUM

antlr ANTLR4 gofmt GoTarget.java GoTarget command injection

33RIESGO

abrir ↗

Referência

CVE-2026-13486

CVE-2026-13486MEDIUM

SourceCodester Class and Exam Timetabling System preview6.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13485

CVE-2026-13485MEDIUM

SourceCodester Class and Exam Timetabling System preview.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-58056

CVE-2026-58056HIGH

RustDesk - FileTransfer Session Authorization Scope Bypass

41RIESGO

abrir ↗

Referência

CVE-2026-58049

CVE-2026-58049HIGH

FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()

41RIESGO

abrir ↗

Referência

CVE-2026-10823

CVE-2026-10823HIGH

YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Post Disclosure

56RIESGO

abrir ↗

Referência

CVE-2025-10268

CVE-2025-10268MEDIUM

Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal

33RIESGO

abrir ↗

Referência

CVE-2026-57522

CVE-2026-57522LOW

Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates

28RIESGO

abrir ↗

Referência

CVE-2026-5796

CVE-2026-5796MEDIUM

Incorrect Authorization in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-12053

CVE-2026-12053HIGH

Insertion of Sensitive Information into Log File in GitLab

41RIESGO

abrir ↗

Referência

CVE-2026-12806

CVE-2026-12806HIGH

Edimax BR-6478AC V2 POST Request formWlSiteSurvey buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-12805

CVE-2026-12805MEDIUM

OFFIS DCMTK ofxml.cc parseFile heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2017-20274

CVE-2017-20274HIGH

Joomla LMS King Professional 3.2.4.0 SQL Injection via learningpath

41RIESGO

abrir ↗

Referência

CVE-2016-20084

CVE-2016-20084MEDIUM

WordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS

33RIESGO

abrir ↗

Referência

CVE-2016-20083

CVE-2016-20083MEDIUM

WordPress More Fields Plugin 2.1 Cross-Site Request Forgery

33RIESGO

abrir ↗

Referência

CVE-2016-20082

CVE-2016-20082MEDIUM

WordPress Plugin Abtest Local File Inclusion via abtest_admin.php

33RIESGO

abrir ↗

Referência

CVE-2017-20273

CVE-2017-20273HIGH

Joomla Event Registration Pro Calendar 4.1.3 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2026-12188

CVE-2026-12188MEDIUM

Grit42 Grit GritEntityController grit_entity_controller.rb sql injection

33RIESGO

abrir ↗

Referência

CVE-2017-20272

CVE-2017-20272HIGH

Joomla Ultimate Property Listing 1.0.2 SQL Injection via sf_selectuser_id

41RIESGO

abrir ↗

Referência

CVE-2026-12797

CVE-2026-12797MEDIUM

BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization

33RIESGO

abrir ↗

Referência

CVE-2017-20271

CVE-2017-20271HIGH

Joomla StreetGuessr Game 1.1.8 SQL Injection via catid

41RIESGO

abrir ↗

Referência

CVE-2017-20270

CVE-2017-20270HIGH

Joomla! Component Twitch Tv 1.1 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2017-20269

CVE-2017-20269HIGH

Joomla! Component KissGallery 1.0.0 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2026-12776

CVE-2026-12776MEDIUM

Montodel House-Rental-Management index.php houses sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-12774

CVE-2026-12774MEDIUM

BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-12771

CVE-2026-12771LOW

BerriAI litellm M2M JWT user_api_key_auth.py improper authorization

28RIESGO

abrir ↗

Referência

CVE-2026-12770

CVE-2026-12770MEDIUM

BerriAI litellm Admin Key key_management_endpoints.py improper authorization

33RIESGO

abrir ↗

Referência✓ VexDay Proof

OllyDbg 1.10 - Local Format String

CVE-2004-0733—localwindows

Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly ex

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.