Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-13701
CVE-2026-13701MEDIUM
Advanced Excerpt < 4.5 - Admin+ Stored XSS via Ellipsis Setting
33RIESGO
abrir ↗
Referência
CVE-2026-109110
CVE-2026-109110CRITICAL
Wavlink WL-WN592AX6 wmapd system os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-18774
CVE-2026-18774MEDIUM
NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2016-9079
CVE-2016-9079HIGHbajo ataque
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis
100RIESGO
abrir ↗
Referência
CVE-2026-9455
CVE-2026-9455CRITICAL
Totolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-15594
CVE-2026-15594MEDIUM
waooAI waoowaoo Media hash.ts stablePublicIdFromStorageKey improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-13578
CVE-2026-13578MEDIUM
itsourcecode Hospital Management System patientdetail.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9454
CVE-2026-9454CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCertGenerationCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-10263
CVE-2026-10263MEDIUM
SourceCodester Computer Repair Shop Management System manage_product.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-10245
CVE-2026-10245MEDIUM
SourceCodester Pharmacy Sales and Inventory System main create_supplier cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-9452
CVE-2026-9452MEDIUM
FoundDream miniclawd exec.ts ExecTool.execute os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-10244
CVE-2026-10244MEDIUM
SourceCodester Pharmacy Sales and Inventory System main create_medicine_name cross site scripting
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Pro Chat Rooms 3.0.2 - Cross-Site Scripting / Cross-Site Request Forgery
CVE-2008-6501—webappsphp
Cross-site scripting (XSS) vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject
23RIESGO
abrir ↗
Referência
CVE-2026-9456
CVE-2026-9456CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-84260
CVE-2026-84260HIGH
click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications
41RIESGO
abrir ↗
Referência
CVE-2026-84259
CVE-2026-84259HIGH
click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications
41RIESGO
abrir ↗
Referência
CVE-2014-5207
CVE-2014-5207—
fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOE
23RIESGO
abrir ↗
Referência
CVE-2026-84252
CVE-2026-84252CRITICAL
click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update
48RIESGO
abrir ↗
Referência
CVE-2013-5094
CVE-2013-5094—
Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inj
23RIESGO
abrir ↗
Referência
CVE-2026-14923
CVE-2026-14923MEDIUM
Sync Post With Other Site < 1.9.3 - Contributor+ Arbitrary Page Creation/Modification
33RIESGO
abrir ↗
Referência
CVE-2017-11830
CVE-2017-11830—
Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allow
23RIESGO
abrir ↗
Referência
CVE-2026-14602
CVE-2026-14602CRITICAL
Remote API <= 0.2 - Unauthenticated PHP Object Injection via remote-api Query Parameter
48RIESGO
abrir ↗
Referência
CVE-2013-5318
CVE-2013-5318—
SQL injection vulnerability in Ginkgo CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the rang par
23RIESGO
abrir ↗
Referência
CVE-2013-5573
CVE-2013-5573—
Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inj
23RIESGO
abrir ↗
Referência
CVE-2017-2930
CVE-2017-2930—
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurre
28RIESGO
abrir ↗
Referência
CVE-2017-0148
CVE-2017-0148HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2017-15944
CVE-2017-15944CRITICALbajo ataque
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote
100RIESGO
abrir ↗
Referência
CVE-2025-9090
CVE-2025-9090MEDIUM
Tenda AC20 Telnet Service telnet websFormDefine command injection
38RIESGO
abrir ↗
Referência
CVE-2013-5962
CVE-2013-5962—
Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 r
28RIESGO
abrir ↗
Referência
CVE-2013-6117
CVE-2013-6117—
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive informatio
60RIESGO
abrir ↗
← anteriorpágina 534 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.