Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2026-8741

CVE-2026-8741LOW

EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition

28RIESGO

abrir ↗

Referência

CVE-2026-8740

CVE-2026-8740MEDIUM

Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine

33RIESGO

abrir ↗

Referência

CVE-2026-8739

CVE-2026-8739MEDIUM

Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key

33RIESGO

abrir ↗

Referência

CVE-2026-16229

CVE-2026-16229MEDIUM

itsourcecode Courier Management System index.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2017-8462

CVE-2017-8462—

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,

23RIESGO

abrir ↗

Referência

CVE-2026-15701

CVE-2026-15701CRITICAL

Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow

48RIESGO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHbajo ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

abrir ↗

Referência

CVE-2017-14712

CVE-2017-14712—

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.

23RIESGO

abrir ↗

Referência

CVE-2014-0749

CVE-2014-0749—

Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Reso

28RIESGO

abrir ↗

Referência

CVE-2026-8345

CVE-2026-8345MEDIUM

D-Link DIR-816 singlePortForward sub_445E7C command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8344

CVE-2026-8344MEDIUM

D-Link DIR-816 formDMZ.cgi sub_445E7C command injection

33RIESGO

abrir ↗

Referência

CVE-2026-43884

CVE-2026-43884HIGH

WWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()

41RIESGO

abrir ↗

Referência

CVE-2026-42613

CVE-2026-42613CRITICAL

Grav: Privilege Escalation via Missing Server-Side Validation of groups/access

48RIESGO

abrir ↗

Referência

CVE-2026-8292

CVE-2026-8292MEDIUM

Open5GS NRF conv.c yuarel_parse denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-7814

CVE-2026-7814MEDIUM

pgAdmin 4: Stored XSS via crafted PostgreSQL object names in Browser Tree and Explain Visualizer

33RIESGO

abrir ↗

Referência

CVE-2026-8290

CVE-2026-8290MEDIUM

Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-8276

CVE-2026-8276MEDIUM

bettercap MySQL Server mysql_server.go integer coercion

33RIESGO

abrir ↗

Referência

CVE-2026-8274

CVE-2026-8274MEDIUM

npitre cramfs-tools Directory cramfsck.c do_directory path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-8272

CVE-2026-8272MEDIUM

D-Link DNS-320 webfile_mgr.cgi chown os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8271

CVE-2026-8271MEDIUM

D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-8269

CVE-2026-8269MEDIUM

Open5GS SMF smf_nsmf_handle_create_sm_context denial of service

33RIESGO

abrir ↗

Referência

CVE-2014-0749

CVE-2014-0749—

Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Reso

28RIESGO

abrir ↗

Referência

CVE-2026-86610

CVE-2026-86610MEDIUM

Download Manager < 3.3.71 - Author+ Stored XSS via Package Icon

33RIESGO

abrir ↗

Referência

CVE-2026-8305

CVE-2026-8305MEDIUM

OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication

33RIESGO

abrir ↗

Referência

CVE-2026-8288

CVE-2026-8288MEDIUM

Open5GS SMF gsm-handler.c denial of service

33RIESGO

abrir ↗

Referência

CVE-2018-17391

CVE-2018-17391—

SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-10204

CVE-2017-10204—

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version

23RIESGO

abrir ↗

Referência

CVE-2020-16040

CVE-2020-16040—

Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially explo

60RIESGO

abrir ↗

Referência

CVE-2020-16040

CVE-2020-16040—

Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially explo

60RIESGO

abrir ↗

Referência

CVE-2017-13209

CVE-2017-13209—

In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.