Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-13533
CVE-2026-13533MEDIUM
agentejo Cockpit CMS htaccess config.yaml YAMLLoad file access
33RIESGO
abrir ↗
Referência
CVE-2026-16562
CVE-2026-16562MEDIUM
WP Statistics < 14.16.10 - Subscriber+ Sensitive Data Disclosure via Metabox AJAX Handlers
33RIESGO
abrir ↗
Referência
CVE-2026-18592
CVE-2026-18592MEDIUM
osCommerce Email Template Configuration EmailController.php EmailController sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Songbird Media Player 0.2 - Format String Denial of Service (PoC)
CVE-2006-6250—doswindows
Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of servic
23RIESGO
abrir ↗
Referência
CVE-2026-18591
CVE-2026-18591LOW
Meesho Online Shopping App com.meesho.supply cleartext storage
28RIESGO
abrir ↗
Referência
CVE-2026-16060
CVE-2026-16060CRITICAL
Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Editor+ Arbitrary File Upload
48RIESGO
abrir ↗
Referência
CVE-2026-8667
CVE-2026-8667MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-15240
CVE-2026-15240HIGH
Customer Switching for WooCommerce < 2.1.3 - Customer+ Privilege Escalation to Administrator via Insecure Operator Resolution
41RIESGO
abrir ↗
Referência
CVE-2026-14207
CVE-2026-14207MEDIUM
LifterLMS < 10.0.10 - Instructor+ Stored XSS via Featured Pricing Information
33RIESGO
abrir ↗
Referência✓ VexDay Proof
CM68 News 12.02.06 - 'addpth' Remote File Inclusion
CVE-2006-6462—webappsphp
PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execu
23RIESGO
abrir ↗
Referência
CVE-2018-19371
CVE-2018-19371—
The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive
23RIESGO
abrir ↗
Referência
CVE-2026-12687
CVE-2026-12687HIGH
ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID
41RIESGO
abrir ↗
Referência✓ VexDay Proof
HR Assist 1.05 - 'vdateUsr.asp' Remote Authentication Bypass
CVE-2006-6524—webappsasp
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Gizzar 03162002 - 'index.php' Remote File Inclusion
CVE-2006-6526—webappsphp
PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute a
23RIESGO
abrir ↗
Referência
CVE-2026-4672
CVE-2026-4672MEDIUM
Missing Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-6267
CVE-2026-6267HIGH
Insertion of Sensitive Information Into Sent Data in GitLab
41RIESGO
abrir ↗
Referência
CVE-2026-6336
CVE-2026-6336MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-12436
CVE-2026-12436HIGH
Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab
41RIESGO
abrir ↗
Referência
CVE-2026-14341
CVE-2026-14341MEDIUM
Missing Authorization in GitLab
33RIESGO
abrir ↗
Referência
Savsoft Quiz 5 - Stored Cross-Site Scripting
CVE-2020-24609—webappsphp
TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the X
23RIESGO
abrir ↗
Referência
CVE-2026-12982
CVE-2026-12982MEDIUM
Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery
33RIESGO
abrir ↗
Referência
CVE-2026-13517
CVE-2026-13517HIGH
Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2019-15975
CVE-2019-15975CRITICAL
Cisco Data Center Network Manager Authentication Bypass Vulnerabilities
85RIESGO
abrir ↗
Referência
CVE-2016-20086
CVE-2016-20086HIGH
Vembu StoreGrid 4.0 Unquoted Service Path Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2020-24949
CVE-2020-24949—
Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a cr
50RIESGO
abrir ↗
Referência
CVE-2026-10820
CVE-2026-10820HIGH
ProfilePress < 4.16.17 - Subscriber+ Subscription Cancellation via IDOR
41RIESGO
abrir ↗
Referência
CVE-2016-20085
CVE-2016-20085HIGH
Realtek High Definition Audio Driver 6.0.1.6730 Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2016-20092
CVE-2016-20092HIGH
NetDrive 2.6.12 Unquoted Service Path Elevation of Privilege
41RIESGO
abrir ↗
Referência
CVE-2026-87974
CVE-2026-87974MEDIUM
Asaas Gateway for WooCommerce < 2.7.8 - Unauthenticated Order Payment Bypass via Webhook
33RIESGO
abrir ↗
Referência
CVE-2026-107158
CVE-2026-107158MEDIUM
LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated FreightDesk Integration Option Update via REST Route
33RIESGO
abrir ↗
← anteriorpágina 574 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.