Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.899exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.463 exploits
Referência
CVE-2017-1129
CVE-2017-1129—
IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it coul
50RIESGO
abrir ↗
Referência
CVE-2026-15318
CVE-2026-15318MEDIUM
Sipeed PicoClaw MQTT Channel mqtt.go authorization
33RIESGO
abrir ↗
Referência
CVE-2026-12517
CVE-2026-12517MEDIUM
Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Site Info Endpoint
33RIESGO
abrir ↗
Referência
CVE-2014-6287
CVE-2014-6287CRITICALbajo ataque
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RIESGO
abrir ↗
Referência
CVE-2017-3248
CVE-2017-3248—
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Suppo
60RIESGO
abrir ↗
Referência
CVE-2014-6332
CVE-2014-6332HIGHbajo ataque
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
100RIESGO
abrir ↗
Referência
CVE-2019-8927
CVE-2019-8927—
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon
23RIESGO
abrir ↗
Referência
CVE-2019-8943
CVE-2019-8943—
WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can
60RIESGO
abrir ↗
Referência
CVE-2015-2825
CVE-2015-2825—
Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPres
28RIESGO
abrir ↗
Referência
CVE-2026-78146
CVE-2026-78146MEDIUM
Noptin < 4.3.3 - Unauthenticated Subscriber PII and confirm_key Disclosure via Actions Page
33RIESGO
abrir ↗
Referência
CVE-2026-77790
CVE-2026-77790MEDIUM
RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-77789
CVE-2026-77789MEDIUM
Stripe Payment Forms by WP Full Pay < 8.5.1 - Cross-Customer Subscription Modification via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-34099
CVE-2026-34099CRITICAL
Guardian Language-System Unauthenticated SQL Injection via id Parameter in job_info.php
48RIESGO
abrir ↗
Referência
CVE-2017-7043
CVE-2017-7043—
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo
23RIESGO
abrir ↗
Referência
CVE-2014-7190
CVE-2014-7190—
Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the auth
23RIESGO
abrir ↗
Referência
CVE-2026-58376
CVE-2026-58376HIGH
Dolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpoints
41RIESGO
abrir ↗
Referência
CVE-2026-58375
CVE-2026-58375HIGH
JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/export
41RIESGO
abrir ↗
Referência
CVE-2026-58371
CVE-2026-58371LOW
SeaweedFS < 4.30 - Cross-Origin Information Disclosure via Unvalidated JSONP callback Parameter
28RIESGO
abrir ↗
Referência
CVE-2026-58176
CVE-2026-58176HIGH
RuoYi-Vue-Plus - Missing Authorization on Workflow Task Management Endpoints
41RIESGO
abrir ↗
Referência
CVE-2017-11548
CVE-2017-11548—
The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of servic
23RIESGO
abrir ↗
Referência
CVE-2026-13571
CVE-2026-13571MEDIUM
SourceCodester Simple Food Ordering System cart.php logic error
33RIESGO
abrir ↗
Referência
CVE-2026-40523
CVE-2026-40523HIGH
FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php
41RIESGO
abrir ↗
Referência
CVE-2026-9676
CVE-2026-9676MEDIUM
f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification
33RIESGO
abrir ↗
Referência
CVE-2026-10083
CVE-2026-10083HIGH
APCu Manager < 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution
41RIESGO
abrir ↗
Referência
CVE-2026-13540
CVE-2026-13540MEDIUM
GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-89050
CVE-2026-89050MEDIUM
Quads Ads Manager for Google AdSense < 3.0.5 - Subscriber+ Ad-Selling Payment Bypass via Unverified Success Return URL
33RIESGO
abrir ↗
Referência
CVE-2026-87759
CVE-2026-87759HIGH
Add User Autocomplete < 1.2 - Subscriber+ Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2017-16945
CVE-2017-16945—
The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequen
23RIESGO
abrir ↗
Referência
CVE-2018-0491
CVE-2018-0491—
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of se
28RIESGO
abrir ↗
Referência
CVE-2019-3842
CVE-2019-3842MEDIUM
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using t
33RIESGO
abrir ↗
← anteriorpágina 758 / 883siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.