Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-108667
CVE-2026-108667MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/revertRecycleBin
33RIESGO
abrir ↗
Referência
CVE-2026-108666
CVE-2026-108666MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteBatch
33RIESGO
abrir ↗
Referência
CVE-2026-108662
CVE-2026-108662MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteTenantPackUser
33RIESGO
abrir ↗
Referência
CVE-2026-108661
CVE-2026-108661HIGH
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/changeOwenUserTenant
41RIESGO
abrir ↗
Referência
CVE-2015-7450
CVE-2015-7450CRITICALbajo ataque
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and
100RIESGO
abrir ↗
Referência
CVE-2015-7567
CVE-2015-7567—
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passw
23RIESGO
abrir ↗
Referência
CVE-2026-108628
CVE-2026-108628HIGH
JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-91077
CVE-2026-91077LOW
Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Contributor+ Unpublished Event Disclosure via mpwem_load_event_list
28RIESGO
abrir ↗
Referência
CVE-2016-0049
CVE-2016-0049—
Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server
28RIESGO
abrir ↗
Referência
CVE-2026-91073
CVE-2026-91073MEDIUM
Subscribe Forms 1.4.1 - 1.6.2 - Author+ Stored XSS via Attention Effect Form Setting
33RIESGO
abrir ↗
Referência
CVE-2026-108627
CVE-2026-108627MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via /sys/role/datarule Endpoint
33RIESGO
abrir ↗
Referência
CVE-2026-89002
CVE-2026-89002MEDIUM
WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Campaign Item Preview
33RIESGO
abrir ↗
Referência
CVE-2026-96513
CVE-2026-96513MEDIUM
Neethuharii CafeManagement AddProductCode.php unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-91025
CVE-2026-91025MEDIUM
Booking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-93507
CVE-2026-93507LOW
WC Fields Factory < 4.1.11 - Contributor+ Arbitrary Post Cloning and Private Content Disclosure
28RIESGO
abrir ↗
Referência
CVE-2026-108629
CVE-2026-108629MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint
33RIESGO
abrir ↗
Referência
CVE-2016-0861
CVE-2016-0861—
General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authentica
28RIESGO
abrir ↗
Referência
CVE-2016-10033
CVE-2016-10033CRITICALbajo ataque
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RIESGO
abrir ↗
Referência
CVE-2026-106095
CVE-2026-106095LOW
Code Snippets < 3.10.0 - Admin+ Network-Scoped Snippet Activation and Deactivation via update_code_snippet
28RIESGO
abrir ↗
Referência
CVE-2016-1719
CVE-2016-1719—
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Referência
CVE-2016-1719
CVE-2016-1719—
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Referência
CVE-2026-105260
CVE-2026-105260MEDIUM
Database Addon For WPForms < 1.1.1 - Arbitrary Form Entry Deletion via CSRF
33RIESGO
abrir ↗
Referência
CVE-2026-105198
CVE-2026-105198MEDIUM
LatePoint < 5.7.3 - Unauthenticated Customer PII Disclosure via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-86850
CVE-2026-86850MEDIUM
SKU Error Fixer for WooCommerce <= 1.0 - Unauthenticated Orphaned Product Variation Deletion
33RIESGO
abrir ↗
Referência
CVE-2026-107695
CVE-2026-107695HIGH
FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist
41RIESGO
abrir ↗
Referência
CVE-2026-9209
CVE-2026-9209CRITICAL
mJobTime 15.7.3.32 Unauthenticated SQL Execution RCE via Login.aspx
48RIESGO
abrir ↗
Referência
CVE-2026-86826
CVE-2026-86826MEDIUM
BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX
33RIESGO
abrir ↗
Referência
CVE-2016-1719
CVE-2016-1719—
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Referência
CVE-2026-105990
CVE-2026-105990MEDIUM
Accept PayPal Payments Using Contact Form 7 < 4.0.7 - Unauthenticated PII Disclosure via CSV Export
33RIESGO
abrir ↗
Referência
CVE-2026-94536
CVE-2026-94536MEDIUM
lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource
33RIESGO
abrir ↗
← anteriorpágina 570 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.