Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.327 exploits
Referência
CVE-2026-86163
CVE-2026-86163MEDIUM
itsourcecode Sales and Inventory System pro_del.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-82542
CVE-2026-82542CRITICAL
Tenda HG10 Boa Web Server formIPv6Routing buffer overflow
48RIESGO
abrir ↗
Referência
CVE-2026-110661
CVE-2026-110661MEDIUM
CGNS through 4.5.2 Stack Out-of-Bounds Read via ADFI_read_node_header
33RIESGO
abrir ↗
Referência
CVE-2026-109188
CVE-2026-109188MEDIUM
jshERP through 3.6 Missing Authorization in Master Data Add and Import Endpoints
33RIESGO
abrir ↗
Referência
CVE-2026-108886
CVE-2026-108886MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername
33RIESGO
abrir ↗
Referência
CVE-2026-88930
CVE-2026-88930HIGH
Social Web Suite <= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared Secret
41RIESGO
abrir ↗
Referência
CVE-2026-84251
CVE-2026-84251CRITICAL
click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options Update
48RIESGO
abrir ↗
Referência
CVE-2026-105284
CVE-2026-105284CRITICAL
Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization
48RIESGO
abrir ↗
Referência
CVE-2026-78371
CVE-2026-78371MEDIUM
File Uploads Addon for WooCommerce 1.7.2 - 1.7.5 - Unauthenticated Customer Uploaded File Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-13718
CVE-2026-13718MEDIUM
Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content
33RIESGO
abrir ↗
Referência
CVE-2026-90988
CVE-2026-90988MEDIUM
Request a Quote <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure via emd_get_std_pagenum
33RIESGO
abrir ↗
Referência
CVE-2026-104123
CVE-2026-104123MEDIUM
SourceCodester Online Reviewer Management System btn_functions.php activity sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-105246
CVE-2026-105246MEDIUM
SourceCodester Online Reviewer Management System btn_functions.php update sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-15385
CVE-2026-15385MEDIUM
RT Mega Menu < 1.5.2 - Subscriber+ Stored XSS via Menu Item CSS
33RIESGO
abrir ↗
Referência
CVE-2026-103090
CVE-2026-103090HIGH
Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)
41RIESGO
abrir ↗
Referência
CVE-2026-103323
CVE-2026-103323MEDIUM
Integration for Epos Now and WooCommerce 4.6.0 - 4.11.1 - Unauthenticated Action Scheduler Queue Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-103229
CVE-2026-103229MEDIUM
AdithyaYelloju Restaurant-Management-System Unauthenticated Action Script delete1.php mysqli_query sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-108678
CVE-2026-108678MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles
33RIESGO
abrir ↗
Referência
CVE-2026-108623
CVE-2026-108623HIGH
JeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch
41RIESGO
abrir ↗
Referência
CVE-2026-104651
CVE-2026-104651MEDIUM
Yaad Sarig Payment Gateway For WC < 2.2.13 - Subscriber+ Arbitrary Order Payment Manipulation via IDOR
33RIESGO
abrir ↗
Referência
CVE-2013-20009
CVE-2013-20009MEDIUM
Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-116471
CVE-2026-116471MEDIUM
BKWLD Decoy Authorization Policy Policy.php privileges management
33RIESGO
abrir ↗
Referência
CVE-2026-116461
CVE-2026-116461MEDIUM
Omega Solution Restro POS sale-invoice logic error
33RIESGO
abrir ↗
Referência
CVE-2026-116385
CVE-2026-116385MEDIUM
Bdtask Garage 24 Garage Management Software Profile edit_profile cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-116370
CVE-2026-116370MEDIUM
2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion
33RIESGO
abrir ↗
Referência
CVE-2026-110691
CVE-2026-110691MEDIUM
WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update
33RIESGO
abrir ↗
Referência
CVE-2026-106002
CVE-2026-106002MEDIUM
Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion
33RIESGO
abrir ↗
Referência
CVE-2026-105997
CVE-2026-105997MEDIUM
Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient
33RIESGO
abrir ↗
Referência
CVE-2026-116384
CVE-2026-116384MEDIUM
Bdtask Garage 24 Garage Management Software Backend improper authorization
33RIESGO
abrir ↗
Referência
CVE-2010-20125
CVE-2010-20125HIGH
DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php
41RIESGO
abrir ↗
← anteriorpágina 616 / 878siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.