Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-105471
CVE-2026-105471MEDIUM
girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-97332
CVE-2026-97332MEDIUM
User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)
33RIESGO
abrir ↗
Referência
CVE-2026-93549
CVE-2026-93549HIGH
CoCart 4.9.0 - 4.9.6 - Administrator Account Creation via REST API Authentication Bypass
41RIESGO
abrir ↗
Referência
CVE-2026-80333
CVE-2026-80333MEDIUM
Solace Extra < 1.7.2 - Unauthenticated Non-Published Post Content Disclosure via Preview Routes
33RIESGO
abrir ↗
Referência
CVE-2026-105099
CVE-2026-105099MEDIUM
Omega Solution CoinEx Crypto Ticket Attachment Upload ticket cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-105098
CVE-2026-105098MEDIUM
Omega Solution CoinEx Crypto Support Ticket API customer information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-104052
CVE-2026-104052MEDIUM
itsourcecode Pet Shop Management System admin_reject_completed.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-90706
CVE-2026-90706MEDIUM
D-Link DWR-M921 formWsc os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-90705
CVE-2026-90705MEDIUM
D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-90607
CVE-2026-90607CRITICAL
Totolink A3002MU boa formNewSchedule buffer overflow
48RIESGO
abrir ↗
Referência
CVE-2026-92399
CVE-2026-92399MEDIUM
GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-92364
CVE-2026-92364MEDIUM
itsourcecode Leave Management System index.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2025-68624
CVE-2025-68624MEDIUM
N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user
33RIESGO
abrir ↗
Referência
CVE-2026-89261
CVE-2026-89261MEDIUM
MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints
33RIESGO
abrir ↗
Referência
CVE-2026-90604
CVE-2026-90604MEDIUM
Totolink A3002MU Anchor Tag cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-86781
CVE-2026-86781MEDIUM
SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-84047
CVE-2026-84047HIGH
Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action
41RIESGO
abrir ↗
Referência
CVE-2026-80491
CVE-2026-80491HIGH
SAMO Forms <= 1.0.0 - Unauthenticated SQLi
41RIESGO
abrir ↗
Referência
CVE-2026-108958
CVE-2026-108958MEDIUM
TensorLayer HDF5 Loading utils.py load_hdf5_graph deserialization
33RIESGO
abrir ↗
Referência
CVE-2026-108957
CVE-2026-108957MEDIUM
TinyLLaVA TinyLLaVA_Factory TinyLlavaConfig configuration_tinyllava.py _load_text_config code injection
33RIESGO
abrir ↗
Referência
CVE-2026-108956
CVE-2026-108956MEDIUM
code-projects Online Reviewer System User Update btn_functions.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-108955
CVE-2026-108955MEDIUM
Tiiny-AI PowerInfer GGUF ggml.c gguf_init_from_file out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-5954
CVE-2026-5954MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-6567
CVE-2026-6567MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-7767
CVE-2026-7767MEDIUM
URL Redirection to Untrusted Site ('Open Redirect') in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-9268
CVE-2026-9268LOW
Incorrect Authorization in GitLab
28RIESGO
abrir ↗
Referência
CVE-2026-14814
CVE-2026-14814HIGH
Permissive Regular Expression in GitLab
41RIESGO
abrir ↗
Referência
CVE-2026-16275
CVE-2026-16275MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-82632
CVE-2026-82632LOW
Incorrect Authorization in GitLab
28RIESGO
abrir ↗
Referência
CVE-2026-84284
CVE-2026-84284MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
← anteriorpágina 583 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.