Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência

CVE-2026-82185

CVE-2026-82185MEDIUM

WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset

33RIESGO

abrir ↗

Referência

CVE-2026-90803

CVE-2026-90803MEDIUM

GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow

33RIESGO

abrir ↗

Referência

CVE-2026-83545

CVE-2026-83545MEDIUM

CoolClock < 4.3.8 - Contributor+ Stored XSS via Custom Skin JSON

33RIESGO

abrir ↗

Referência

CVE-2026-90712

CVE-2026-90712MEDIUM

Gitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-95924

CVE-2026-95924MEDIUM

SourceCodester Online Reviewer Management System btn_functions.php add sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-85123

CVE-2026-85123MEDIUM

Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Registration Policy Bypass via Login Form Type Confusion

33RIESGO

abrir ↗

Referência

CVE-2026-96763

CVE-2026-96763MEDIUM

kvcache-ai mooncake MountSegment Request Processing segment.cpp access control

33RIESGO

abrir ↗

Referência

CVE-2026-90621

CVE-2026-90621MEDIUM

ipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-96601

CVE-2026-96601MEDIUM

Abdurrab5 online-makeup-store Admin Login index.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-16966

CVE-2026-16966MEDIUM

Solace Extra < 1.7.0 - Unauthenticated Draft/Private Site Builder Content Disclosure via get_elementor_content

33RIESGO

abrir ↗

Referência

CVE-2026-75793

CVE-2026-75793MEDIUM

SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic Login

33RIESGO

abrir ↗

Referência

CVE-2017-5753

CVE-2017-5753MEDIUM

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of

55RIESGO

abrir ↗

Referência

CVE-2026-86170

CVE-2026-86170MEDIUM

DefaultFuction CRM edit.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-67278

CVE-2026-67278MEDIUM

TLS server impersonation possible in Mikrotik RouterOS

33RIESGO

abrir ↗

Referência

CVE-2026-82700

CVE-2026-82700MEDIUM

code-projects Online Shopping System Newsletter Subscription offersmail.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-95897

CVE-2026-95897MEDIUM

Dask Loader core.py from_npy_stack deserialization

33RIESGO

abrir ↗

Referência

CVE-2026-90923

CVE-2026-90923MEDIUM

Autopay < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion

33RIESGO

abrir ↗

Referência

CVE-2026-90704

CVE-2026-90704MEDIUM

D-Link DWR-M921 formDiskPartition system command injection

33RIESGO

abrir ↗

Referência

CVE-2026-90615

CVE-2026-90615MEDIUM

SourceCodester Class and Exam Timetabling System subject1.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-90489

CVE-2026-90489MEDIUM

Xuxueli xxl-job insert cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-84901

CVE-2026-84901MEDIUM

Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization

33RIESGO

abrir ↗

Referência

CVE-2026-97877

CVE-2026-97877MEDIUM

zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password

33RIESGO

abrir ↗

Referência

CVE-2026-96272

CVE-2026-96272HIGH

ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php

41RIESGO

abrir ↗

Referência

CVE-2026-95868

CVE-2026-95868MEDIUM

AdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-90702

CVE-2026-90702CRITICAL

D-Link DWR-M921 formDiskFormat system os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-90697

CVE-2026-90697MEDIUM

SourceCodester Inventory Management System invoice.php authorization

33RIESGO

abrir ↗

Referência

CVE-2026-90696

CVE-2026-90696MEDIUM

SourceCodester Inventory Management System Product Management products_handler.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-80113

CVE-2026-80113MEDIUM

PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTL

33RIESGO

abrir ↗

Referência

CVE-2026-81197

CVE-2026-81197MEDIUM

MasterStudy LMS < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure via course-list REST Route

33RIESGO

abrir ↗

Referência

CVE-2026-82906

CVE-2026-82906MEDIUM

sdcb chats Signed File Download Endpoint FileController.cs DownloadPublic missing authentication

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.