Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2026-16051

CVE-2026-16051CRITICAL

WPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Action

48RIESGO

abrir ↗

Referência

CVE-2018-9238

CVE-2018-9238—

proberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-4935

CVE-2026-4935HIGH

SureTriggers < 1.1.23 – Unauthenticated SQLi

41RIESGO

abrir ↗

Referência✓ VexDay Proof

OSSIM 0.9.9rc5 - Cross-Site Scripting / SQL Injection

CVE-2008-0919—webappsphp

Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9

23RIESGO

abrir ↗

Referência✓ VexDay Proof

D-Bus Daemon < 1.2.4 - 'libdbus' Denial of Service

CVE-2008-3834—dosmultiple

The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a deni

23RIESGO

abrir ↗

Referência

CVE-2026-18614

CVE-2026-18614CRITICAL

GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection

48RIESGO

abrir ↗

Referência

CVE-2026-7810

CVE-2026-7810MEDIUM

UsamaK98 python-notebook-mcp server.py add_cell path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-41471

CVE-2026-41471HIGH

Easy PayPal Events & Tickets < 1.4 Information Disclosure via QR Code Endpoint

41RIESGO

abrir ↗

Referência

CVE-2026-14195

CVE-2026-14195LOW

Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info

28RIESGO

abrir ↗

Referência

CVE-2026-29514

CVE-2026-29514HIGH

NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin

41RIESGO

abrir ↗

Referência

SPBAS Business Automation Software 2012 - Multiple Vulnerabilities

CVE-2013-4664—webappsphp

SPBAS Business Automation Software 2012 has XSS.

23RIESGO

abrir ↗

Referência

CVE-2026-14834

CVE-2026-14834MEDIUM

Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX

33RIESGO

abrir ↗

Referência

CVE-2026-14833

CVE-2026-14833MEDIUM

Lightbox with PhotoSwipe < 5.9.0 - Author+ Stored XSS via data-lbwps-caption Attribute

33RIESGO

abrir ↗

Referência

CVE-2013-4692

CVE-2013-4692—

Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS

23RIESGO

abrir ↗

Referência

CVE-2013-7091

CVE-2013-7091—

Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zim

60RIESGO

abrir ↗

Referência✓ VexDay Proof

Ultra Office - ActiveX Control Arbitrary File Corruption

CVE-2008-3879—doswindows

The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Contr

23RIESGO

abrir ↗

Referência

CVE-2016-5304

CVE-2016-5304—

Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6

23RIESGO

abrir ↗

Referência

CVE-2026-16064

CVE-2026-16064MEDIUM

Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event

33RIESGO

abrir ↗

Referência

CVE-2026-66007

CVE-2026-66007MEDIUM

Datasets Path Traversal via Unsanitized file_name Metadata

33RIESGO

abrir ↗

Referência

CVE-2015-1305

CVE-2015-1305—

McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, an

23RIESGO

abrir ↗

Referência

CVE-2026-5657

CVE-2026-5657MEDIUM

Double Free in Wireshark

33RIESGO

abrir ↗

Referência

CVE-2026-8985

CVE-2026-8985CRITICAL

Unauthenticated Command Injection

48RIESGO

abrir ↗

Referência

CVE-2013-0230

CVE-2013-0230—

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP

50RIESGO

abrir ↗

Referência

CVE-2026-7604

CVE-2026-7604MEDIUM

JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-17531

CVE-2026-17531LOW

unitedbyai droidclaw Unsigned Scheduled Callback goals.ts authorization

28RIESGO

abrir ↗

Referência

CVE-2026-8984

CVE-2026-8984CRITICAL

Unauthenticated RCE

48RIESGO

abrir ↗

Referência

CVE-2026-7319

CVE-2026-7319MEDIUM

elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-7318

CVE-2026-7318MEDIUM

elie mcp-project research_server.py search_papers path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-7317

CVE-2026-7317LOW

Grav CMS Cache Value FileCache.php doGet deserialization

28RIESGO

abrir ↗

Referência

CVE-2026-7316

CVE-2026-7316MEDIUM

eiliyaabedini aider-mcp code_with_ai aider_mcp.py command injection

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.