Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-14826
CVE-2026-14826LOW
Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR
28RIESGO
abrir ↗
Referência
CVE-2026-63097
CVE-2026-63097MEDIUM
Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure
33RIESGO
abrir ↗
Referência
CVE-2026-14825
CVE-2026-14825LOW
Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR
28RIESGO
abrir ↗
Referência
CVE-2017-17849
CVE-2017-17849—
A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to exec
28RIESGO
abrir ↗
Referência
CVE-2026-76886
CVE-2026-76886HIGH
Heap-based Buffer Overflow in Wireshark
41RIESGO
abrir ↗
Referência
CVE-2026-76591
CVE-2026-76591MEDIUM
TRENDnet TEW-755AP ssi email.cgi log_email_server command injection
33RIESGO
abrir ↗
Referência
CVE-2026-12396
CVE-2026-12396MEDIUM
WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection
33RIESGO
abrir ↗
Referência
CVE-2026-15622
CVE-2026-15622MEDIUM
poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization
33RIESGO
abrir ↗
Referência
CVE-2026-15595
CVE-2026-15595MEDIUM
SourceCodester Class and Exam Timetabling System forsubject.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2017-2460
CVE-2017-2460—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Referência
CVE-2026-12275
CVE-2026-12275HIGH
Tutor LMS < 3.9.13 - Subscriber+ Unauthorized Course Enrollment and Private Course Content Disclosure via Droip/Kirki Integration
41RIESGO
abrir ↗
Referência
CVE-2026-90576
CVE-2026-90576MEDIUM
GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference
33RIESGO
abrir ↗
Referência
CVE-2026-90691
CVE-2026-90691MEDIUM
0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-90690
CVE-2026-90690MEDIUM
0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-90575
CVE-2026-90575MEDIUM
PHPGurukul Small CRM Login Success login.php unserialize deserialization
33RIESGO
abrir ↗
Referência
CVE-2026-12274
CVE-2026-12274MEDIUM
Tutor LMS < 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-12273
CVE-2026-12273MEDIUM
Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Auto-Approved Comment Creation
33RIESGO
abrir ↗
Referência
CVE-2017-2478
CVE-2017-2478—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Internet Explorer 6 / Ademco co. ltd. ATNBaseLoader100 Module - Remote Buffer Overflow
CVE-2007-2938—remotewindows
Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6,
35RIESGO
abrir ↗
Referência
CVE-2026-75078
CVE-2026-75078MEDIUM
SourceCodester Class and Exam Timetabling System BSHRM1.php cross site scripting
33RIESGO
abrir ↗
Referência✓ VexDay Proof
FlaP 1.0b - 'pachtofile' Remote File Inclusion
CVE-2007-2940—webappsphp
Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b (1.0 Beta) allow remote attackers to execute arbitrary P
23RIESGO
abrir ↗
Referência
CVE-2026-58478
CVE-2026-58478MEDIUM
Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL
33RIESGO
abrir ↗
Referência
CVE-2017-3623
CVE-2017-3623—
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported ve
28RIESGO
abrir ↗
Referência
CVE-2019-1821
CVE-2019-1821HIGH
Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities
78RIESGO
abrir ↗
Referência
CVE-2017-3881
CVE-2017-3881CRITICALbajo ataque
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software co
100RIESGO
abrir ↗
Referência
CVE-2026-13539
CVE-2026-13539HIGH
Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2015-3141
CVE-2015-3141—
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier
23RIESGO
abrir ↗
Referência
CVE-2026-13538
CVE-2026-13538MEDIUM
Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection
33RIESGO
abrir ↗
Referência
CVE-2019-25755
CVE-2019-25755HIGH
Joomla vReview 1.9.11 SQL Injection via editReview
41RIESGO
abrir ↗
Referência
CVE-2019-25754
CVE-2019-25754HIGH
Joomla vRestaurant 1.9.4 SQL Injection via menu-listing-layout
41RIESGO
abrir ↗
← anteriorpágina 814 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.