Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2015-2275

CVE-2015-2275—

Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to i

23RIESGO

abrir ↗

Referência

CVE-2026-105998

CVE-2026-105998MEDIUM

Booking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing Authorization

33RIESGO

abrir ↗

Referência

CVE-2015-2994

CVE-2015-2994—

Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators t

50RIESGO

abrir ↗

Referência

CVE-2026-77934

CVE-2026-77934HIGH

Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner

41RIESGO

abrir ↗

Referência

CVE-2026-77933

CVE-2026-77933CRITICAL

DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment

48RIESGO

abrir ↗

Referência

CVE-2026-77932

CVE-2026-77932CRITICAL

DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent

48RIESGO

abrir ↗

Referência

CVE-2026-77930

CVE-2026-77930CRITICAL

EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents

48RIESGO

abrir ↗

Referência

CVE-2026-112195

CVE-2026-112195MEDIUM

FusionPBX Dialplan Editor dialplan.php os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-112193

CVE-2026-112193MEDIUM

Webkul Aureus ERP UserForm.php weak password

33RIESGO

abrir ↗

Referência

CVE-2026-96904

CVE-2026-96904MEDIUM

AWP Classifieds < 4.4.9 - Unauthenticated Listing Contact Email Disclosure via Place Ad Page

33RIESGO

abrir ↗

Referência

CVE-2015-5287

CVE-2015-5287HIGHbajo ataque

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain perm

86RIESGO

abrir ↗

Referência

CVE-2026-110657

CVE-2026-110657MEDIUM

Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label

33RIESGO

abrir ↗

Referência

CVE-2026-101301

CVE-2026-101301MEDIUM

WPCode 2.0.0 - 2.3.9 - Unauthenticated Snippet Suppression via Safe Mode Bypass

33RIESGO

abrir ↗

Referência

CVE-2015-6152

CVE-2015-6152—

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

35RIESGO

abrir ↗

Referência

CVE-2026-108672

CVE-2026-108672MEDIUM

JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser

33RIESGO

abrir ↗

Referência

CVE-2026-112057

CVE-2026-112057MEDIUM

libdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chapters

33RIESGO

abrir ↗

Referência

CVE-2026-108670

CVE-2026-108670MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/experiment

33RIESGO

abrir ↗

Referência

CVE-2026-112052

CVE-2026-112052MEDIUM

libspatialite through 5.1.0 Integer Overflow in WKB Geometry Parsing

33RIESGO

abrir ↗

Referência

CVE-2026-112062

CVE-2026-112062MEDIUM

lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response Handler

33RIESGO

abrir ↗

Referência

CVE-2026-112018

CVE-2026-112018HIGH

cgltf through 1.15 Heap Out-of-Bounds Write via cgltf_accessor_unpack_floats()

41RIESGO

abrir ↗

Referência

CVE-2026-97394

CVE-2026-97394HIGH

kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items

41RIESGO

abrir ↗

Referência

CVE-2026-110031

CVE-2026-110031HIGH

Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key

41RIESGO

abrir ↗

Referência

CVE-2026-110026

CVE-2026-110026MEDIUM

Tasty Recipes Lite 1.2 - 1.2.10 - Contributor+ Taxonomy Term Creation, Renaming and Deletion

33RIESGO

abrir ↗

Referência

CVE-2026-109937

CVE-2026-109937MEDIUM

Otter Blocks < 3.2.3 - Unauthenticated Open Redirect via Stripe Checkout Block

33RIESGO

abrir ↗

Referência

CVE-2026-108708

CVE-2026-108708HIGH

Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil

41RIESGO

abrir ↗

Referência

CVE-2026-108674

CVE-2026-108674MEDIUM

JeecgBoot through 3.9.5 Missing Authorization via /openapi/queryById

33RIESGO

abrir ↗

Referência

CVE-2026-87844

CVE-2026-87844MEDIUM

Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection

33RIESGO

abrir ↗

Referência

CVE-2026-111875

CVE-2026-111875MEDIUM

David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization

33RIESGO

abrir ↗

Referência

CVE-2026-103043

CVE-2026-103043HIGH

anchorme through 3.0.8 Regular Expression Denial of Service

41RIESGO

abrir ↗

Referência

CVE-2026-96532

CVE-2026-96532HIGH

Testimonials Widget <= 4.0.4 - Unauthenticated Arbitrary Post Update

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.