Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.899exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.463 exploits
Referência
CVE-2026-7689
CVE-2026-7689MEDIUM
Dolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification
33RIESGO
abrir ↗
Referência
CVE-2026-7687
CVE-2026-7687MEDIUM
langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection
33RIESGO
abrir ↗
Referência
CVE-2014-8357
CVE-2014-8357—
backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BeContent 031 - 'id' SQL Injection
CVE-2008-0921—webappsphp
SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2026-10872
CVE-2026-10872HIGH
Shibby Tomato Web UI rc start_vpnserver os command injection
41RIESGO
abrir ↗
Referência
Printix Client 1.3.1106.0 - Remote Code Execution (RCE)
CVE-2022-25089—remotewindows
Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL
28RIESGO
abrir ↗
Referência
CVE-2014-4113
CVE-2014-4113HIGHbajo ataque
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RIESGO
abrir ↗
Referência
CVE-2026-9386
CVE-2026-9386CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setLanguageCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9385
CVE-2026-9385CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setTracerouteCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9376
CVE-2026-9376MEDIUM
JPress UCenter Article Submission Endpoint doWriteSave improper authorization
33RIESGO
abrir ↗
Referência
CVE-2014-8361
CVE-2014-8361CRITICALbajo ataque
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClien
100RIESGO
abrir ↗
Referência
CVE-2026-50266
CVE-2026-50266LOW
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another p
28RIESGO
abrir ↗
Referência
CVE-2026-9372
CVE-2026-9372MEDIUM
ItzCrazyKns Vane Model Provider API route.ts server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-9371
CVE-2026-9371MEDIUM
ItzCrazyKns Vane API route.ts missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-9370
CVE-2026-9370MEDIUM
ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt
33RIESGO
abrir ↗
Referência
CVE-2016-7255
CVE-2016-7255HIGHbajo ataqueransomware
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
93RIESGO
abrir ↗
Referência
CVE-2016-7287
CVE-2016-7287—
The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary c
35RIESGO
abrir ↗
Referência
CVE-2026-7682
CVE-2026-7682MEDIUM
Edimax BR-6208AC L2TP Mode setWAN command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7582
CVE-2026-7582MEDIUM
AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write
33RIESGO
abrir ↗
Referência
CVE-2026-8234
CVE-2026-8234HIGH
EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7581
CVE-2026-7581MEDIUM
alexta69 MeTube CORS Policy main.py on_prepare cross-domain policy
33RIESGO
abrir ↗
Referência
CVE-2026-8231
CVE-2026-8231MEDIUM
CodeAstro Online Catering Ordering System deleteorder.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7579
CVE-2026-7579MEDIUM
AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials
33RIESGO
abrir ↗
Referência
CVE-2026-7578
CVE-2026-7578MEDIUM
MacCMS Pro Plugin Installation add.html install unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-7555
CVE-2026-7555MEDIUM
itsourcecode Electronic Judging System login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7144
CVE-2026-7144MEDIUM
1000 Projects Portfolio Management System MCA update_passwd_process.php authorization
33RIESGO
abrir ↗
Referência
CVE-2026-41466
CVE-2026-41466MEDIUM
ProjeQtor < 12.4.4 Stored XSS via checkValidHtmlText()
33RIESGO
abrir ↗
Referência
CVE-2026-41465
CVE-2026-41465HIGH
ProjeQtor < 12.4.4 Path Traversal via dynamicDialog.php
41RIESGO
abrir ↗
Referência
CVE-2026-41464
CVE-2026-41464HIGH
ProjeQtor < 12.4.4 Missing Authorization via objectDetail.php
41RIESGO
abrir ↗
Referência
CVE-2026-41464
CVE-2026-41464HIGH
ProjeQtor < 12.4.4 Missing Authorization via objectDetail.php
41RIESGO
abrir ↗
← anteriorpágina 776 / 883siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.