Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.533exploits catalogados

35.607CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.407 exploits

Referência

CVE-2026-15413

CVE-2026-15413CRITICAL

Link Factory - Backdoor

48RIESGO

abrir ↗

Referência

CVE-2026-8667

CVE-2026-8667MEDIUM

Incorrect Authorization in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-15423

CVE-2026-15423HIGH

Incorrect Authorization in GitLab

41RIESGO

abrir ↗

Referência

CVE-2026-16627

CVE-2026-16627HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

41RIESGO

abrir ↗

Referência

CVE-2026-17008

CVE-2026-17008MEDIUM

Quick PayPal Payments <= 5.7.50 - Unauthenticated Payment Bypass via PayPal IPN

33RIESGO

abrir ↗

Referência

CVE-2026-16990

CVE-2026-16990MEDIUM

Payment Button for PayPal <= 1.2.3.44 - Unauthenticated Payment Price Manipulation

33RIESGO

abrir ↗

Referência

CVE-2026-16747

CVE-2026-16747MEDIUM

Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions

33RIESGO

abrir ↗

Referência

CVE-2026-16621

CVE-2026-16621MEDIUM

Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via PayPal Advanced Return Handler

33RIESGO

abrir ↗

Referência

CVE-2026-15213

CVE-2026-15213MEDIUM

Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass via Forged Settlement Callback

33RIESGO

abrir ↗

Referência

CVE-2026-15045

CVE-2026-15045MEDIUM

Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount

33RIESGO

abrir ↗

Referência

CVE-2026-19217

CVE-2026-19217MEDIUM

Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box Widget

33RIESGO

abrir ↗

Referência

CVE-2026-19073

CVE-2026-19073MEDIUM

Order Sync with Zendesk for WooCommerce < 2.2.3 - Unauthenticated Customer Order Data Disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-19052

CVE-2026-19052MEDIUM

ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls

33RIESGO

abrir ↗

Referência

CVE-2026-19050

CVE-2026-19050MEDIUM

ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate

33RIESGO

abrir ↗

Referência

CVE-2026-18962

CVE-2026-18962MEDIUM

WP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization

33RIESGO

abrir ↗

Referência

CVE-2026-18943

CVE-2026-18943MEDIUM

WPC Admin Columns < 2.3.4 - Subscriber+ Arbitrary User/Post/Term Meta Disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-18789

CVE-2026-18789HIGH

Ezoic < 2.23.1 - Unauthenticated Database Export via Content Export REST Routes

41RIESGO

abrir ↗

Referência

CVE-2026-18474

CVE-2026-18474HIGH

WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category

41RIESGO

abrir ↗

Referência

CVE-2020-3187

CVE-2020-3187CRITICAL

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability

85RIESGO

abrir ↗

Referência

CVE-2020-3452

CVE-2020-3452HIGHbajo ataque

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

abrir ↗

Referência

CVE-2026-14756

CVE-2026-14756MEDIUM

code-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14755

CVE-2026-14755MEDIUM

code-projects Hotel and Tourism Reservation Reservations Management reservations.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14754

CVE-2026-14754MEDIUM

code-projects Hotel and Tourism Reservation add_room.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14744

CVE-2026-14744MEDIUM

code-projects Real State Services normalHomeRent.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14742

CVE-2026-14742LOW

langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash

28RIESGO

abrir ↗

Referência

CVE-2026-13517

CVE-2026-13517HIGH

Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-10820

CVE-2026-10820HIGH

ProfilePress < 4.16.17 - Subscriber+ Subscription Cancellation via IDOR

41RIESGO

abrir ↗

Referência

CVE-2016-20092

CVE-2016-20092HIGH

NetDrive 2.6.12 Unquoted Service Path Elevation of Privilege

41RIESGO

abrir ↗

Referência

CVE-2016-20086

CVE-2016-20086HIGH

Vembu StoreGrid 4.0 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2016-20085

CVE-2016-20085HIGH

Realtek High Definition Audio Driver 6.0.1.6730 Privilege Escalation

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.