Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.533exploits catalogados

35.607CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.407 exploits

Referência

CVE-2026-18433

CVE-2026-18433MEDIUM

Incorrect Authorization in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-7427

CVE-2026-7427MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-8224

CVE-2026-8224MEDIUM

Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8223

CVE-2026-8223MEDIUM

Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8222

CVE-2026-8222MEDIUM

Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_management_handle_register denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8221

CVE-2026-8221MEDIUM

Devs Palace ERP Online item-save cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-8220

CVE-2026-8220MEDIUM

Devs Palace ERP Online customer-save cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-8219

CVE-2026-8219MEDIUM

Devs Palace ERP Online supplier-save cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-8218

CVE-2026-8218MEDIUM

Devs Palace ERP Online purchase_return_save cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-8217

CVE-2026-8217MEDIUM

Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8217

CVE-2026-8217MEDIUM

Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-19343

CVE-2026-19343MEDIUM

code-projects Task Management System AdminLogin.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-19342

CVE-2026-19342MEDIUM

code-projects Task Management System Login index.php improper authentication

33RIESGO

abrir ↗

Referência

CVE-2026-19341

CVE-2026-19341HIGH

UTT HiPER 1200GW pptpSrvGlobalConfig strcpy stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2020-14882

CVE-2020-14882CRITICALbajo ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RIESGO

abrir ↗

Referência

CVE-2026-15359

CVE-2026-15359MEDIUM

Templately < 3.7.1 - Unauthenticated Administrator Templately Cloud Connection Overwrite

33RIESGO

abrir ↗

Referência

CVE-2026-14842

CVE-2026-14842MEDIUM

Events Made Easy < 3.1.2 - Unauthenticated Payment Bypass

33RIESGO

abrir ↗

Referência

CVE-2026-14812

CVE-2026-14812CRITICAL

Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)

48RIESGO

abrir ↗

Referência

CVE-2020-17519

CVE-2020-17519CRITICALbajo ataque

Apache Flink directory traversal attack: reading remote files through the REST API

100RIESGO

abrir ↗

Referência

CVE-2026-66748

CVE-2026-66748HIGH

Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field

41RIESGO

abrir ↗

Referência

CVE-2026-43760

CVE-2026-43760HIGH

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe

41RIESGO

abrir ↗

Referência

CVE-2025-15662

CVE-2025-15662HIGH

Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery

41RIESGO

abrir ↗

Referência

CVE-2026-13399

CVE-2026-13399HIGH

Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order

41RIESGO

abrir ↗

Referência

CVE-2026-14306

CVE-2026-14306MEDIUM

Tutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass

33RIESGO

abrir ↗

Referência

CVE-2026-12584

CVE-2026-12584HIGH

Payment Gateway for Redsys & WooCommerce Lite < 7.0.2 - Unauthenticated Payment Confirmation via Unverified Inespay Callback

41RIESGO

abrir ↗

Referência

CVE-2026-11361

CVE-2026-11361MEDIUM

Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status

33RIESGO

abrir ↗

Referência

CVE-2018-25351

CVE-2018-25351HIGH

Joomla! Component EkRishta 2.10 SQL Injection via username

41RIESGO

abrir ↗

Referência

CVE-2026-9299

CVE-2026-9299MEDIUM

omec-project amf handler.go PDUSessionResourceModifyIndication memory corruption

33RIESGO

abrir ↗

Referência

CVE-2026-9298

CVE-2026-9298MEDIUM

omec-project amf PathSwitchRequest memory corruption

33RIESGO

abrir ↗

Referência

CVE-2026-13597

CVE-2026-13597CRITICAL

QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover

48RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.