Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.449exploits catalogados
35.552CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.332 exploits
Referência
CVE-2022-50955
CVE-2022-50955MEDIUM
WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery
33RIESGO
abrir ↗
Referência
CVE-2022-50954
CVE-2022-50954MEDIUM
WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion
33RIESGO
abrir ↗
Referência
CVE-2022-50949
CVE-2022-50949MEDIUM
WordPress Plugin Videos sync PDF 1.7.4 Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50948
CVE-2022-50948MEDIUM
Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting
33RIESGO
abrir ↗
Referência
CVE-2022-50947
CVE-2022-50947MEDIUM
WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50946
CVE-2022-50946MEDIUM
WordPress Plugin Netroics Blog Posts Grid 1.0 Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50945
CVE-2022-50945MEDIUM
WordPress 3dady Real-Time Web Stats 1.0 Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2017-15992
CVE-2017-15992—
Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.
23RIESGO
abrir ↗
Referência
CVE-2017-15993
CVE-2017-15993—
Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-16001
CVE-2017-16001—
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently su
23RIESGO
abrir ↗
Referência
CVE-2022-50943
CVE-2022-50943MEDIUM
Moodle LMS 4.0 Cross-Site Scripting via course search.php
33RIESGO
abrir ↗
Referência
CVE-2026-8244
CVE-2026-8244MEDIUM
Industrial Application Software IAS Canias ERP Login RMI improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-8242
CVE-2026-8242MEDIUM
Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy
33RIESGO
abrir ↗
Referência
CVE-2026-8241
CVE-2026-8241MEDIUM
Industrial Application Software IAS Canias ERP RMI iasGetServerInfoEvent improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-8235
CVE-2026-8235MEDIUM
8421bit MiniClaw System kernel.ts resolveSkillScriptPath os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8229
CVE-2026-8229MEDIUM
Wavlink NU516U1 wireless.cgi WifiBasic os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8228
CVE-2026-8228MEDIUM
Wavlink NU516U1 wireless.cgi advance os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8227
CVE-2026-8227MEDIUM
Wavlink NU516U1 adm.cgi wzdapMesh os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8226
CVE-2026-8226MEDIUM
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-8225
CVE-2026-8225MEDIUM
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-8195
CVE-2026-8195MEDIUM
JeecgBoot SVG File CommonController.java cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-8190
CVE-2026-8190MEDIUM
Wavlink NU516U1 adm.cgi wan os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8209
CVE-2026-8209MEDIUM
Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Quote&Ordering System 1.0 - 'ordernum' Multiple Vulnerabilities
CVE-2007-0144—webappsasp
Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authent
23RIESGO
abrir ↗
Referência
CVE-2016-1721
CVE-2016-1721—
The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges o
23RIESGO
abrir ↗
Referência
CVE-2026-17433
CVE-2026-17433MEDIUM
nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-65698
CVE-2026-65698MEDIUM
Void 1.3.4 Path Traversal via AI Agent File-Reading Tools
33RIESGO
abrir ↗
Referência
CVE-2026-9066
CVE-2026-9066MEDIUM
WP Compress < 7.10.04 - Reflected XSS via test_zone
33RIESGO
abrir ↗
Referência
CVE-2026-14291
CVE-2026-14291HIGH
Security Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2fa
41RIESGO
abrir ↗
Referência✓ VexDay Proof
OmniWeb 5.5.1 - JavaScript alert() Remote Format String (PoC)
CVE-2007-0148—dososx
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service (application
23RIESGO
abrir ↗
← anteriorpágina 458 / 745siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.