Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.713exploits catalogados

39.298CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

4478 exploits

Nucleihigh

XStore Theme < 9.7.3 - SQL Injection

CVE-2026-3326HIGH

XStore < 9.7.3 - Unauthenticated SQLi

56RIESGO

abrir ↗

Nucleicritical

LoLLMs WEBUI - Server-Side Request Forgery

CVE-2026-33340CRITICAL

LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint

43RIESGO

abrir ↗

Nucleimedium

Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload

CVE-2026-3335MEDIUM

Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload

28RIESGO

abrir ↗

Nucleimedium

Discourse - Private Group Membership Inference via exclude_groups

CVE-2026-33425MEDIUM

Discourse has inferable private group membership or existence via exclude_groups parameter

28RIESGO

abrir ↗

Nucleicritical

OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization

CVE-2026-33439CRITICAL

Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM

43RIESGO

abrir ↗

Nucleihigh

SiYuan <= v3.6.1 - Path Traversal

CVE-2026-33476HIGH

SiYuan has an Unauthenticated Arbitrary File Read via Path Traversal

36RIESGO

abrir ↗

Nucleicritical

AVideo <= 26.0 - WWBN AVideo - Remote Code Execution

CVE-2026-33478CRITICAL

AVideo Multi-Chain Attack: Unauthenticated Remote Code Execution via Clone Key Disclosure, Database Dump, and Command Injection

48RIESGO

abrir ↗

Nucleihigh

Langflow < 1.7.0 - Path Traversal

CVE-2026-33497HIGH

Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading

36RIESGO

abrir ↗

Nucleicritical

Open WebUI 'LDAP Empty Password' - Authentication Bypass

CVE-2026-44551CRITICAL

Open WebUI: LDAP Empty Password Authentication Bypass

43RIESGO

abrir ↗

Nucleihigh

Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials

CVE-2026-44825HIGH

Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users

56RIESGO

abrir ↗

Nucleihigh

Dozzle - Server Side Request Forgery

CVE-2026-45298HIGH

Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)

36RIESGO

abrir ↗

Nucleihigh

Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure

CVE-2026-45332HIGH

Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint

56RIESGO

abrir ↗

Nucleimedium

Open WebUI < 0.9.5 - Information Disclosure

CVE-2026-45397MEDIUM

Open WebUI: Unauthenticated RAG Configuration Disclosure

28RIESGO

abrir ↗

Nucleicritical

Kopia Server 0.23.0 - Remote Code Execution

CVE-2026-45695CRITICAL

Kopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used

43RIESGO

abrir ↗

Nucleicritical

Cockpit Web Console < 360 - Remote Code Execution

CVE-2026-4631CRITICAL

Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection

63RIESGO

abrir ↗

Nucleicritical

9Router <= 0.4.36 - Unauthenticated RCE

CVE-2026-46339CRITICAL

9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

63RIESGO

abrir ↗

Nucleicritical

phpMyFAQ <= 4.1.1 - SQL Injection

CVE-2026-46364CRITICAL

phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha

43RIESGO

abrir ↗

Nucleihigh

SillyTavern - Server-Side Request Forgery

CVE-2026-46372HIGH

SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

36RIESGO

abrir ↗

Nucleicritical

Flowise < 3.1.2 - node-custom-function Unauthorized RCE

CVE-2026-46442CRITICAL

Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

63RIESGO

abrir ↗

Nucleicritical

YesWiki < 4.6.4 - Unauthenticated SQL Injection

CVE-2026-46670CRITICAL

YesWiki: Unauthenticated SQL Injection

43RIESGO

abrir ↗

Nucleicritical

TYPO3 ceselector Extension - Insecure Deserialization

CVE-2026-46725CRITICAL

Remote Code Execution in extension "Content Element Selector" (ceselector)

43RIESGO

abrir ↗

Nucleicritical

DbGate - Remote Code Execution via Anonymous JWT

CVE-2026-47668CRITICAL

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

63RIESGO

abrir ↗

Nucleicritical

DbGate - Remote Code Execution via Dynamic Import Bypass

CVE-2026-47670CRITICAL

DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection

63RIESGO

abrir ↗

Nucleihigh

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure

CVE-2026-47717HIGH

FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations

36RIESGO

abrir ↗

Nucleicritical

Pheditor 2.0.1-2.0.3 - OS Command Injection

CVE-2026-48030CRITICAL

Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)

63RIESGO

abrir ↗

Nucleicritical

Google ADK-Python - Unauthenticated Builder Endpoint

CVE-2026-4810CRITICAL

Remote Code Execution in Google Agent Development Kit (ADK)

43RIESGO

abrir ↗

Nucleicritical

Adobe ColdFusion - RDS Arbitrary File Write

CVE-2026-48282CRITICALbajo ataque

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

100RIESGO

abrir ↗

Nucleihigh

ColdFusion - Path Traversal

CVE-2026-48313CRITICAL

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

43RIESGO

abrir ↗

Nucleicritical

SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass

CVE-2026-48558CRITICALbajo ataque

SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification

93RIESGO

abrir ↗

Nucleicritical

phpBB < 3.3.17 - Authentication Bypass

CVE-2026-48611CRITICAL

Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or

63RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.