Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.055exploits catalogados
40.803CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.350VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-50811
CVE-2026-50811MEDIUM
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736
33RIESGO
abrir ↗
Referência
CVE-2011-5186
CVE-2011-5186—
Cross-site scripting (XSS) vulnerability in jbshop.php in the jbShop plugin for e107 7 allows remote attackers to inject
23RIESGO
abrir ↗
Referência
CVE-2017-14717
CVE-2017-14717—
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.
23RIESGO
abrir ↗
Referência
CVE-2014-100003
CVE-2014-100003—
SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for Wor
23RIESGO
abrir ↗
Referência
CVE-2017-14798
CVE-2017-14798HIGH
local privilege escalation in SUSE postgresql init script
41RIESGO
abrir ↗
Referência
Anuko Time Tracker 1.19.23.5325 - CSV/Formula Injection
CVE-2020-15255HIGHwebappsphp
CSV injection in Anuko Time Tracker
41RIESGO
abrir ↗
Referência
CVE-2011-5204
CVE-2011-5204—
Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading fr
23RIESGO
abrir ↗
Referência
CVE-2018-15844
CVE-2018-15844—
An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's pas
23RIESGO
abrir ↗
Referência
CVE-2026-8207
CVE-2026-8207HIGH
Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/gr
41RIESGO
abrir ↗
Referência
CVE-2021-47929
CVE-2021-47929MEDIUM
WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2021-47928
CVE-2021-47928HIGH
Opencart TMD Vendor System 3.x Blind SQL Injection via product route
41RIESGO
abrir ↗
Referência
CVE-2021-47923
CVE-2021-47923CRITICAL
OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie
48RIESGO
abrir ↗
Referência
CVE-2017-14839
CVE-2017-14839—
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.
23RIESGO
abrir ↗
Referência
CVE-2026-14607
CVE-2026-14607MEDIUM
RT-Thread lwp_syscall.c sys_getaddrinfo memory corruption
33RIESGO
abrir ↗
Referência
CVE-2026-103543
CVE-2026-103543MEDIUM
itsourcecode Leave Management System controller.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-90801
CVE-2026-90801MEDIUM
GNU Binutils ld cache.c cache_bwrite buffer overflow
33RIESGO
abrir ↗
Referência
CVE-2005-2428
CVE-2005-2428—
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hid
60RIESGO
abrir ↗
Referência
CVE-2014-8687
CVE-2014-8687—
Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root
50RIESGO
abrir ↗
Referência
CVE-2026-14601
CVE-2026-14601MEDIUM
Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-75087
CVE-2026-75087MEDIUM
itsourcecode Hospital Management System viewdepartment.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2011-5283
CVE-2011-5283—
Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Expre
23RIESGO
abrir ↗
Referência
CVE-2026-19973
CVE-2026-19973MEDIUM
itsourcecode Hospital Management System viewpaymentreport.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-34022
CVE-2026-34022HIGH
Weak custom cryptography and hard-coded keys in Wertheim SafeController 65000 allow traffic decryption
41RIESGO
abrir ↗
Referência
CVE-2011-5283
CVE-2011-5283—
Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Expre
23RIESGO
abrir ↗
Referência
CVE-2026-19709
CVE-2026-19709MEDIUM
Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass
33RIESGO
abrir ↗
Referência
CVE-2026-18466
CVE-2026-18466MEDIUM
WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation
33RIESGO
abrir ↗
Referência
CVE-2018-18797
CVE-2018-18797—
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.
23RIESGO
abrir ↗
Referência
CVE-2026-76988
CVE-2026-76988MEDIUM
liftoff-sr CIPster ForwardOpen cipconnectionmanager.cc forward_open out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-75876
CVE-2026-75876MEDIUM
xianrendzw EasyReport Move Operations ModuleController.java sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-75130
CVE-2026-75130MEDIUM
Context7 2.1.2 Prompt Injection via Custom AI Instructions
33RIESGO
abrir ↗
← anteriorpágina 788 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.