Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-91025
CVE-2026-91025MEDIUM
Booking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-93507
CVE-2026-93507LOW
WC Fields Factory < 4.1.11 - Contributor+ Arbitrary Post Cloning and Private Content Disclosure
28RIESGO
abrir ↗
Referência
CVE-2026-108629
CVE-2026-108629MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint
33RIESGO
abrir ↗
Referência
CVE-2016-0861
CVE-2016-0861—
General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authentica
28RIESGO
abrir ↗
Referência
CVE-2016-10033
CVE-2016-10033CRITICALbajo ataque
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RIESGO
abrir ↗
Referência
CVE-2026-104953
CVE-2026-104953MEDIUM
MPG < 4.2.3 - Editor+ SQLi via Project Import
33RIESGO
abrir ↗
Referência
CVE-2016-1719
CVE-2016-1719—
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Referência
CVE-2016-1719
CVE-2016-1719—
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Referência
CVE-2016-1719
CVE-2016-1719—
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Referência
CVE-2016-1721
CVE-2016-1721—
The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges o
23RIESGO
abrir ↗
Referência
CVE-2026-77764
CVE-2026-77764MEDIUM
GamiPress < 7.9.9.6 - Subscriber+ Arbitrary User Points and Achievement Award via Watch-Video Listeners
33RIESGO
abrir ↗
Referência
CVE-2026-82613
CVE-2026-82613MEDIUM
itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-74928
CVE-2026-74928HIGH
WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation via Trello Import Routes
41RIESGO
abrir ↗
Referência
CVE-2026-16737
CVE-2026-16737MEDIUM
WP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cart
33RIESGO
abrir ↗
Referência
CVE-2026-16538
CVE-2026-16538CRITICAL
TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up
48RIESGO
abrir ↗
Referência
CVE-2026-18465
CVE-2026-18465MEDIUM
WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion
33RIESGO
abrir ↗
Referência
CVE-2026-78063
CVE-2026-78063MEDIUM
Tenda CH22 editFileName formeditFileName command injection
33RIESGO
abrir ↗
Referência
CVE-2026-104667
CVE-2026-104667MEDIUM
Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order
33RIESGO
abrir ↗
Referência
CVE-2026-94536
CVE-2026-94536MEDIUM
lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource
33RIESGO
abrir ↗
Referência
CVE-2026-105706
CVE-2026-105706MEDIUM
SourceCodester Drug Recommendation System cross-site request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-105705
CVE-2026-105705MEDIUM
SourceCodester Drug Recommendation System add_drug.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-105704
CVE-2026-105704MEDIUM
SourceCodester Drug Recommendation System Auth Guard improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-105703
CVE-2026-105703MEDIUM
PHPGurukul User Registration & Login and User Management System Change Password change-password.php authorization
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Sun Board 1.00.00 alpha - Remote File Inclusion
CVE-2007-3370—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrar
45RIESGO
abrir ↗
Referência✓ VexDay Proof
Prozilla Directory Script - 'Directory.php?cat_id' SQL Injection
CVE-2007-3809—webappsphp
Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Realtor 747 - 'index.php?categoryId' SQL Injection
CVE-2007-3810—webappsphp
SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eSyndiCat Directory Software - Multiple SQL Injections
CVE-2007-3811—webappsphp
Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the
23RIESGO
abrir ↗
Referência
CVE-2016-1846
CVE-2016-1846—
The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows a
23RIESGO
abrir ↗
Referência
CVE-2026-113388
CVE-2026-113388MEDIUM
opensource-socialnetwork Cache Settings dynamic.php input code injection
33RIESGO
abrir ↗
Referência
CVE-2026-87916
CVE-2026-87916MEDIUM
WPBot 8.4.9 - 8.5.9 - Unauthenticated Chat Visitor PII Disclosure
33RIESGO
abrir ↗
← anteriorpágina 532 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.