Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2022-50964
CVE-2022-50964MEDIUM
uBidAuction 2.0.1 myAuctions loose Reflected XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50964
CVE-2022-50964MEDIUM
uBidAuction 2.0.1 myAuctions loose Reflected XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50963
CVE-2022-50963MEDIUM
uBidAuction 2.0.1 myAuctions active Reflected XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50963
CVE-2022-50963MEDIUM
uBidAuction 2.0.1 myAuctions active Reflected XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50960
CVE-2022-50960MEDIUM
WordPress International Sms Contact Form 7 Integration 1.2 XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50959
CVE-2022-50959MEDIUM
WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php
33RIESGO
abrir ↗
Referência
CVE-2022-50958
CVE-2022-50958MEDIUM
WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php
33RIESGO
abrir ↗
Referência
CVE-2022-50957
CVE-2022-50957MEDIUM
Drupal avatar_uploader 7.x-1.0-beta8 Reflected XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50956
CVE-2022-50956MEDIUM
WordPress Plugin amministrazione-aperta 3.7.3 Local File Read
33RIESGO
abrir ↗
Referência
CVE-2022-50955
CVE-2022-50955MEDIUM
WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery
33RIESGO
abrir ↗
Referência
CVE-2022-50954
CVE-2022-50954MEDIUM
WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion
33RIESGO
abrir ↗
Referência
CVE-2022-50949
CVE-2022-50949MEDIUM
WordPress Plugin Videos sync PDF 1.7.4 Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50948
CVE-2022-50948MEDIUM
Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting
33RIESGO
abrir ↗
Referência
CVE-2022-50947
CVE-2022-50947MEDIUM
WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50946
CVE-2022-50946MEDIUM
WordPress Plugin Netroics Blog Posts Grid 1.0 Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2022-50945
CVE-2022-50945MEDIUM
WordPress 3dady Real-Time Web Stats 1.0 Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2015-7246
CVE-2015-7246—
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou
28RIESGO
abrir ↗
Referência
CVE-2013-5758
CVE-2013-5758—
cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by
28RIESGO
abrir ↗
Referência
CVE-2017-17628
CVE-2017-17628—
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
23RIESGO
abrir ↗
Referência
CVE-2022-50943
CVE-2022-50943MEDIUM
Moodle LMS 4.0 Cross-Site Scripting via course search.php
33RIESGO
abrir ↗
Referência
CVE-2026-8244
CVE-2026-8244MEDIUM
Industrial Application Software IAS Canias ERP Login RMI improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-8242
CVE-2026-8242MEDIUM
Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy
33RIESGO
abrir ↗
Referência
CVE-2026-8241
CVE-2026-8241MEDIUM
Industrial Application Software IAS Canias ERP RMI iasGetServerInfoEvent improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-108612
CVE-2026-108612MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch
33RIESGO
abrir ↗
Referência
CVE-2015-6589
CVE-2015-6589—
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before
28RIESGO
abrir ↗
Referência
CVE-2026-8235
CVE-2026-8235MEDIUM
8421bit MiniClaw System kernel.ts resolveSkillScriptPath os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8229
CVE-2026-8229MEDIUM
Wavlink NU516U1 wireless.cgi WifiBasic os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8228
CVE-2026-8228MEDIUM
Wavlink NU516U1 wireless.cgi advance os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8227
CVE-2026-8227MEDIUM
Wavlink NU516U1 adm.cgi wzdapMesh os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8226
CVE-2026-8226MEDIUM
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial of service
33RIESGO
abrir ↗
← anteriorpágina 537 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.