Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.533exploits catalogados

35.607CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.407 exploits

Referência

CVE-2026-4110

CVE-2026-4110MEDIUM

Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_auctions_bids_list

33RIESGO

abrir ↗

Referência

CVE-2026-10530

CVE-2026-10530MEDIUM

Pie Register < 3.8.4.10 - Unauthenticated Email Verification Bypass via Predictable Token

33RIESGO

abrir ↗

Referência

CVE-2026-13592

CVE-2026-13592MEDIUM

liftoff-sr CIPster EtherNet IP Message append out-of-bounds write

33RIESGO

abrir ↗

Referência

CVE-2026-13591

CVE-2026-13591LOW

DeepMyst Mysti Contact Tracking ChannelBridge.ts _isTrackedConversation improper authorization

28RIESGO

abrir ↗

Referência

CVE-2026-13590

CVE-2026-13590MEDIUM

seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-13589

CVE-2026-13589MEDIUM

seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-34112

CVE-2026-34112CRITICAL

Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php

48RIESGO

abrir ↗

Referência

CVE-2026-13588

CVE-2026-13588MEDIUM

seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-13587

CVE-2026-13587MEDIUM

seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-13583

CVE-2026-13583HIGH

Edimax EW-7478APC POST Request formUSBFolder buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2018-8065

CVE-2018-8065—

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access v

60RIESGO

abrir ↗

Referência

CVE-2026-11623

CVE-2026-11623LOW

tmux image.c image_free use after free

28RIESGO

abrir ↗

Referência

CVE-2026-11555

CVE-2026-11555MEDIUM

D-Link DGS-1100-08PD Web boa.conf least privilege violation

33RIESGO

abrir ↗

Referência

CVE-2026-11553

CVE-2026-11553HIGH

Tenda HG7HG9/HG10 formPPPEdit stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-11516

CVE-2026-11516MEDIUM

UTT HiPER 2610G formNatStaticMap strcpy buffer overflow

33RIESGO

abrir ↗

Referência

CVE-2026-11514

CVE-2026-11514MEDIUM

itsourcecode Hospital Management System addpatient.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11513

CVE-2026-11513MEDIUM

itsourcecode Hospital Management System adminaccount.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11508

CVE-2026-11508MEDIUM

CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-8089

CVE-2026-8089HIGH

weMail < 2.1.3 - Reflected Cross-Site Scripting

41RIESGO

abrir ↗

Referência

CVE-2026-55706

CVE-2026-55706MEDIUM

sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values f

33RIESGO

abrir ↗

Referência

CVE-2016-20081

CVE-2016-20081HIGH

WordPress Plugin HB Audio Gallery Lite 1.0.0 Path Traversal File Download

41RIESGO

abrir ↗

Referência

CVE-2016-20073

CVE-2016-20073HIGH

Answer My Question 1.3 Plugin WordPress SQL Injection via modal.php

41RIESGO

abrir ↗

Referência

CVE-2017-20262

CVE-2017-20262HIGH

Joomla! Component Ajax Quiz 1.8 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2017-20257

CVE-2017-20257HIGH

Joomla! Component Quiz Deluxe 3.7.4 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2017-20256

CVE-2017-20256HIGH

Joomla Survey Force Deluxe 3.2.4 SQL Injection via invite Parameter

41RIESGO

abrir ↗

Referência

CVE-2017-20255

CVE-2017-20255HIGH

Joomla! Component JB Visa 1.0 SQL Injection via visatype

41RIESGO

abrir ↗

Referência

CVE-2017-20254

CVE-2017-20254HIGH

Joomla! Component User Bench 1.0 SQL Injection via userid

41RIESGO

abrir ↗

Referência

CVE-2017-20253

CVE-2017-20253HIGH

Joomla! Component My Projects 2.0 SQL Injection

41RIESGO

abrir ↗

Referência

CVE-2017-20252

CVE-2017-20252HIGH

Joomla NextGen Editor 2.1.0 SQL Injection via plname Parameter

41RIESGO

abrir ↗

Referência

CVE-2023-54353

CVE-2023-54353HIGH

Chromacam 4.0.3.0 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.