Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.533exploits catalogados
35.607CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.407 exploits
Referência
CVE-2025-15687
CVE-2025-15687MEDIUM
Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-69116
CVE-2026-69116MEDIUM
FlyEnv < 4.18.0 Cross-Site Scripting via v-html
33RIESGO
abrir ↗
Referência
CVE-2026-69114
CVE-2026-69114HIGH
Spacebar Server Cross-Channel Message Deletion via Permission Check Bypass
41RIESGO
abrir ↗
Referência
CVE-2026-18470
CVE-2026-18470HIGH
Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response
41RIESGO
abrir ↗
Referência
CVE-2026-18469
CVE-2026-18469HIGH
Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Code Brute Force
41RIESGO
abrir ↗
Referência
CVE-2026-18468
CVE-2026-18468HIGH
Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header
41RIESGO
abrir ↗
Referência
CVE-2026-17019
CVE-2026-17019MEDIUM
JetEngine < 3.8.13.1 - Unauthenticated Stored XSS via Form File Upload (SVG)
33RIESGO
abrir ↗
Referência
CVE-2026-16299
CVE-2026-16299CRITICAL
Single Sign On For TNG < 2.2.0 - Unauthenticated Arbitrary Password Reset
48RIESGO
abrir ↗
Referência
CVE-2026-16298
CVE-2026-16298CRITICAL
FoodBoxBooker < 1.0.7 - Unauthenticated Arbitrary Password Reset
48RIESGO
abrir ↗
Referência
CVE-2026-16257
CVE-2026-16257HIGH
Arvow AI SEO Writer < 1.5.4 - Unauthenticated Arbitrary Post Creation via Webhook Secret Type-Juggling
41RIESGO
abrir ↗
Referência
CVE-2026-18030
CVE-2026-18030HIGH
Bricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms
41RIESGO
abrir ↗
Referência
CVE-2026-17542
CVE-2026-17542HIGH
Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector
41RIESGO
abrir ↗
Referência
CVE-2026-8224
CVE-2026-8224MEDIUM
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-8223
CVE-2026-8223MEDIUM
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-8222
CVE-2026-8222MEDIUM
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_management_handle_register denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-8221
CVE-2026-8221MEDIUM
Devs Palace ERP Online item-save cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-8220
CVE-2026-8220MEDIUM
Devs Palace ERP Online customer-save cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-8219
CVE-2026-8219MEDIUM
Devs Palace ERP Online supplier-save cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-8218
CVE-2026-8218MEDIUM
Devs Palace ERP Online purchase_return_save cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-8217
CVE-2026-8217MEDIUM
Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8217
CVE-2026-8217MEDIUM
Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-19343
CVE-2026-19343MEDIUM
code-projects Task Management System AdminLogin.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-19342
CVE-2026-19342MEDIUM
code-projects Task Management System Login index.php improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-19341
CVE-2026-19341HIGH
UTT HiPER 1200GW pptpSrvGlobalConfig strcpy stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2020-14882
CVE-2020-14882CRITICALbajo ataque
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
Referência
CVE-2026-15359
CVE-2026-15359MEDIUM
Templately < 3.7.1 - Unauthenticated Administrator Templately Cloud Connection Overwrite
33RIESGO
abrir ↗
Referência
CVE-2026-14842
CVE-2026-14842MEDIUM
Events Made Easy < 3.1.2 - Unauthenticated Payment Bypass
33RIESGO
abrir ↗
Referência
CVE-2026-14812
CVE-2026-14812CRITICAL
Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)
48RIESGO
abrir ↗
Referência
CVE-2020-17519
CVE-2020-17519CRITICALbajo ataque
Apache Flink directory traversal attack: reading remote files through the REST API
100RIESGO
abrir ↗
Referência
CVE-2026-66748
CVE-2026-66748HIGH
Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field
41RIESGO
abrir ↗
← anteriorpágina 490 / 747siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.