Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
83.713exploits catalogados
39.298CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
4478 exploits
Nucleicritical
WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation
MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator
63RIESGO
abrir ↗Nucleihigh
Eclipse Theia - Unauthenticated Path Traversal
In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/hostedPlug
36RIESGO
abrir ↗Nucleihigh
WP Fast Total Search <= 1.80.280 - Unauthenticated Time-Based Blind SQL Injection
WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injection
36RIESGO
abrir ↗Nucleimedium
URL Shortify <= 1.12.1 - Open Redirect
URL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter
28RIESGO
abrir ↗Nucleicritical
Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
100RIESGO
abrir ↗Nucleimedium
All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write
All-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path Traversal
48RIESGO
abrir ↗Nucleimedium
Frontend Post Submission Manager Lite <= 1.2.7 - Open Redirect
Frontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' Parameter
28RIESGO
abrir ↗Nucleihigh
Mail Mint < 1.19.5 - Unauthenticated Email Disclosure
Mail Mint < 1.19.5 - Unauthenticated Emails Disclosure
36RIESGO
abrir ↗Nucleicritical
Splunk Enterprise & Cloud Platform - Unrestricted File Upload
Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
100RIESGO
abrir ↗Nucleicritical
Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass
Gitea Docker image trusts spoofable reverse-proxy headers by default
63RIESGO
abrir ↗Nucleicritical
tpadmin <= 1.3.12 - Remote Code Execution
yuan1994 tpadmin WebUploader preview.php deserialization
28RIESGO
abrir ↗Nucleicritical
Langflow - Broken Access Control
Langflow Missing Authentication on Critical API Endpoints
48RIESGO
abrir ↗Nucleimedium
AnythingLLM - Username Enumeration via Password Recovery
AnythingLLM Vulnerable to Username Enumeration w/ Password Recovery
28RIESGO
abrir ↗Nucleicritical
Fortinet FortiClientEMS 7.4.4 - SQL Injection
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiC
100RIESGO
abrir ↗Nucleicritical
n8n Webhooks - Remote Code Execution
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
85RIESGO
abrir ↗Nucleihigh
Mailpit < 1.28.3 - Server-Side Request Forgery
Mailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF)
28RIESGO
abrir ↗Nucleicritical
ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL Injection
ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments
43RIESGO
abrir ↗Nucleicritical
n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution
n8n is vulnerable to Remote Code Execution via Arbitrary File Write
43RIESGO
abrir ↗Nucleicritical
ZimaOS - Authentication Bypass
ZimaOS has Authentication Bypass via System-Level Username
43RIESGO
abrir ↗Nucleihigh
osTicket - Arbitrary File Read
osTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export Arbitrary File Read
58RIESGO
abrir ↗Nucleicritical
UniFi Network Application - Path Traversal
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network App
68RIESGO
abrir ↗Nucleihigh
Easy Appointments <= 3.12.21 - Information Disclosure
Easy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST API
36RIESGO
abrir ↗Nucleihigh
Windmill < 1.603.3 - Operator Authorization Bypass
Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE
56RIESGO
abrir ↗Nucleihigh
Spring Cloud Config Server - Path Traversal
Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks
36RIESGO
abrir ↗Nucleicritical
vLLM 0.8.3 - 0.14.0 - Information Disclosure
vLLM leaks a heap address when PIL throws an error
48RIESGO
abrir ↗Nucleihigh
OpenCode < 1.0.216 - Unauthenticated Remote Code Execution
OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution
41RIESGO
abrir ↗Nucleihigh
Blinko < 1.8.4 - Path Traversal
Blinko: Unauthorized Arbitrary File Read - /api/file/temp
36RIESGO
abrir ↗Nucleimedium
Blinko <= 1.8.3 - Path Traversal via /plugins
Blinko: Unauthorized Arbitrary File Read - /plugins
28RIESGO
abrir ↗Nucleilow
Blinko <= 1.8.3 - User Information Leak
Blinko: Unauthorized User Information Leak
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.