Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.554exploits catalogados
39.165CVEs con explotación pública
24.695probados en laboratorio
9636 exploits
VulnCheck XDB
initial-access
CVE-2026-49049HIGH08 oct 2026
Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler
56RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-5430CRITICALbajo ataque08 oct 2026
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
78RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-5430CRITICALbajo ataque08 oct 2026
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
78RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-48907CRITICALbajo ataque08 oct 2026
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
98RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-7600CRITICALbajo ataqueransomware08 oct 2026
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-1000861CRITICALbajo ataque08 oct 2026
A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and ea
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-48908CRITICALbajo ataque08 oct 2026
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
100RIESGO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL08 oct 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-17564—08 oct 2026
Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST
50RIESGO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL08 oct 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RIESGO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL08 oct 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2014-6271CRITICALbajo ataque08 oct 2026
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2010-2861HIGHbajo ataqueransomware08 oct 2026
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow re
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-12149CRITICALbajo ataqueransomware08 oct 2026
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALbajo ataqueransomware08 oct 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2019-2215HIGHbajo ataque07 oct 2026
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RIESGO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL07 oct 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-10520CRITICALbajo ataque07 oct 2026
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-23744CRITICAL07 oct 2026
REC in MCPJam inspector due to HTTP Endpoint exposes
75RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-87902HIGHbajo ataque07 oct 2026
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
98RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2022-0185HIGHbajo ataque07 oct 2026
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RIESGO
abrir ↗
VulnCheck XDB
info-leak
CVE-2025-29927CRITICAL07 oct 2026
Authorization Bypass in Next.js Middleware
85RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-24061CRITICALbajo ataque07 oct 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RIESGO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL07 oct 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RIESGO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL07 oct 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2024-7971HIGHbajo ataque07 oct 2026
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a
76RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2025-21479HIGHbajo ataque06 oct 2026
Incorrect Authorization in Graphics
71RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-102489HIGHbajo ataque06 oct 2026
Undisclosed RCE in Zammad v6.3 and higher
71RIESGO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL06 oct 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RIESGO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL06 oct 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RIESGO
abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.