Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.533exploits catalogados
35.607CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.407 exploits
Referência
CVE-2026-8138
Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow
41RIESGO
abrir ↗Referência
CVE-2026-8136
SourceCodester Pharmacy Sales and Inventory System index.php users cross site scripting
33RIESGO
abrir ↗Referência
CVE-2024-27686
Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (devic
41RIESGO
abrir ↗Referência
CVE-2026-14231
LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts
33RIESGO
abrir ↗Referência
CVE-2026-14207
LifterLMS < 10.0.10 - Instructor+ Stored XSS via Featured Pricing Information
33RIESGO
abrir ↗Referência
Wordpress Plugin BulletProof Security 5.1 - Sensitive Information Disclosure
BulletProof Security <= 5.1 Sensitive Information Disclosure
70RIESGO
abrir ↗Referência
CVE-2019-9692
class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard
50RIESGO
abrir ↗Referência
CVE-2026-9401
Edimax BR-6675nD POST Request formWanTcpipSetup buffer overflow
41RIESGO
abrir ↗Referência
CVE-2026-9400
Edimax BR-6675nD POST Request formUSBStorage command injection
33RIESGO
abrir ↗Referência
CVE-2026-9388
Totolink A8000RU Web Management cstecgi.cgi setScheduleCfg os command injection
48RIESGO
abrir ↗Referência
CVE-2026-9387
Totolink A8000RU Web Management cstecgi.cgi setUpgradeFW os command injection
48RIESGO
abrir ↗Referência
CVE-2026-9369
NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparison
33RIESGO
abrir ↗Referência
CVE-2022-45899
Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as
33RIESGO
abrir ↗Referência
CVE-2024-33724
SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.
48RIESGO
abrir ↗Referência
CVE-2026-7709
janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization
33RIESGO
abrir ↗Referência
CVE-2026-7708
Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service
33RIESGO
abrir ↗Referência
CVE-2026-7700
langflow-ai langflow LambdaFilterComponent lambda_filter.p eval code injection
33RIESGO
abrir ↗Referência
CVE-2026-7698
Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection
33RIESGO
abrir ↗Referência
CVE-2026-7697
AMTT Hotel Broadband Operation System cardhand_submit.php sql injection
33RIESGO
abrir ↗Referência
CVE-2026-7696
Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform uploadH5Files unrestricted upload
33RIESGO
abrir ↗Referência
CVE-2026-7695
Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform elecMaxMinAvgValue sql injection
33RIESGO
abrir ↗Referência
CVE-2026-14919
ShopMonitor.io < 1.2.0 - Unauthenticated Administrator Account Takeover via Password-Reset Email Reroute
48RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.