Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-92883
CVE-2026-92883HIGH
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
41RIESGO
abrir ↗
Referência
CVE-2026-108909
CVE-2026-108909MEDIUM
Netcore NR268 CGI Endpoint cross-site request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-108908
CVE-2026-108908MEDIUM
Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-108907
CVE-2026-108907CRITICAL
Netcore NR268 CGI Execution user_ok improper authentication
48RIESGO
abrir ↗
Referência
CVE-2026-108890
CVE-2026-108890MEDIUM
BlackBeltTechnology pi-agent-dashboard Terminal terminal-handler.ts terminalManager.spawn improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-109180
CVE-2026-109180MEDIUM
jshERP through 3.6 Authorization Bypass via User-Controlled Warehouse IDs
33RIESGO
abrir ↗
Referência
CVE-2026-109178
CVE-2026-109178MEDIUM
jshERP through 3.6 Missing Authorization via /log Audit Endpoints
33RIESGO
abrir ↗
Referência
CVE-2026-108883
CVE-2026-108883HIGH
JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig
41RIESGO
abrir ↗
Referência
CVE-2026-122188
CVE-2026-122188MEDIUM
DeepGraphLearning KnowledgeGraphEmbedding Checkpoint Loading run.py override_config path traversal
30RIESGO
abrir ↗
Referência
CVE-2026-122160
CVE-2026-122160MEDIUM
myshell-ai AIlice HuggingFace Model Wrapper AModelCausalLM.py LoadModel_PEFT inclusion of functionality from untrusted control sphere
30RIESGO
abrir ↗
Referência
CVE-2026-122159
CVE-2026-122159MEDIUM
Edge0-AI Audio8_TTS Model Path Resolution runtime.py ArkTtsRuntime.__init__ path traversal
30RIESGO
abrir ↗
Referência
CVE-2026-122158
CVE-2026-122158MEDIUM
InvoiceShelf MemberService.php create access control
30RIESGO
abrir ↗
Referência
CVE-2026-122157
CVE-2026-122157MEDIUM
Purocean Yank Note Terminal index.ts checkPermission os command injection
30RIESGO
abrir ↗
Referência
CVE-2026-122154
CVE-2026-122154MEDIUM
purocean Yank Note Settings Endpoint index.ts config.getAll information disclosure
30RIESGO
abrir ↗
Referência
CVE-2026-122151
CVE-2026-122151MEDIUM
Presenton User Configuration user-config JSON.parse cross-site request forgery
30RIESGO
abrir ↗
Referência
CVE-2026-122146
CVE-2026-122146MEDIUM
101arrowz fflate index.mjs unzipSync memory corruption
30RIESGO
abrir ↗
Referência
CVE-2026-122144
CVE-2026-122144MEDIUM
nliautaud pico-content-editor cross-site request forgery
30RIESGO
abrir ↗
Referência
CVE-2026-122051
CVE-2026-122051CRITICAL
Edimax BR-6208AC mp command injection
45RIESGO
abrir ↗
Referência
CVE-2026-122050
CVE-2026-122050MEDIUM
Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection
30RIESGO
abrir ↗
Referência
CVE-2026-122049
CVE-2026-122049MEDIUM
Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication
30RIESGO
abrir ↗
Referência
CVE-2026-122048
CVE-2026-122048MEDIUM
Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection
30RIESGO
abrir ↗
Referência
CVE-2026-122047
CVE-2026-122047MEDIUM
Campcodes Complete Advance Loan Management System banner.php move_uploaded_file unrestricted upload
30RIESGO
abrir ↗
Referência
CVE-2026-122038
CVE-2026-122038MEDIUM
krupalshah EmployeeRecruitmentSystem Requirement Board Update reqformprocessing.php mysql_query sql injection
30RIESGO
abrir ↗
Referência
CVE-2026-54384
CVE-2026-54384CRITICAL
VitaFit Cloud API Authentication Bypass via POST /front/login/sns/
45RIESGO
abrir ↗
Referência
CVE-2026-54383
CVE-2026-54383HIGH
VitaFit Cloud API Excessive Data Exposure via relation/search Endpoint
38RIESGO
abrir ↗
Referência
CVE-2026-54382
CVE-2026-54382MEDIUM
VitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 Access
30RIESGO
abrir ↗
Referência
CVE-2026-122028
CVE-2026-122028MEDIUM
NST Labs Tech Nstbrowser Local Agent API info information disclosure
30RIESGO
abrir ↗
Referência
CVE-2026-108067
CVE-2026-108067LOW
FV Flowplayer Video Player < 7.5.56.7212 - Contributor+ Arbitrary Video and Meta Record Deletion, Video Modification and Meta Disclosure via IDOR
28RIESGO
abrir ↗
Referência
CVE-2026-108041
CVE-2026-108041HIGH
SEOPress < 10.4 - Authenticated Stored XSS via Analytics Tracking Settings
41RIESGO
abrir ↗
Referência
CVE-2026-106649
CVE-2026-106649MEDIUM
Kali Forms < 2.4.29 - Author+ Stored XSS via Button Click Action
33RIESGO
abrir ↗
← anteriorpágina 593 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.