Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2022-30519
CVE-2022-30519MEDIUM
XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary c
33RIESGO
abrir ↗
Referência
CVE-2026-103332
CVE-2026-103332MEDIUM
Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key
33RIESGO
abrir ↗
Referência
CVE-2026-77007
CVE-2026-77007HIGH
HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated BigBlueButton API Secret Disclosure
41RIESGO
abrir ↗
Referência
CVE-2026-116640
CVE-2026-116640MEDIUM
Saruf-Ratul HR-Payroll-Management-System chat.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-116639
CVE-2026-116639MEDIUM
MD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-82595
CVE-2026-82595MEDIUM
D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection
33RIESGO
abrir ↗
Referência
CVE-2016-4807
CVE-2016-4807—
Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS
23RIESGO
abrir ↗
Referência
CVE-2026-78654
CVE-2026-78654MEDIUM
cleverbrush framework/deep deepExtend.ts deepExtend prototype pollution
33RIESGO
abrir ↗
Referência
CVE-2026-78169
CVE-2026-78169CRITICAL
UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2026-16575
CVE-2026-16575MEDIUM
Dokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint
33RIESGO
abrir ↗
Referência
CVE-2026-77031
CVE-2026-77031MEDIUM
Tenda CH22 formcreateFileName command injection
33RIESGO
abrir ↗
Referência
CVE-2017-17572
CVE-2017-17572—
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
23RIESGO
abrir ↗
Referência
CVE-2025-10666
CVE-2025-10666HIGH
D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2017-8536
CVE-2017-8536—
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve
28RIESGO
abrir ↗
Referência
D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow (DoS)
CVE-2025-10666HIGHhardwaremultiple
D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-19615
CVE-2026-19615MEDIUM
Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC
33RIESGO
abrir ↗
Referência
CVE-2015-6305
CVE-2015-6305—
Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConne
23RIESGO
abrir ↗
Referência
CVE-2026-79912
CVE-2026-79912MEDIUM
TOTOLINK N600R cstecgi.cgi getCurrentTime command injection
33RIESGO
abrir ↗
Referência
CVE-2026-78168
CVE-2026-78168CRITICAL
EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication
48RIESGO
abrir ↗
Referência
CVE-2015-6512
CVE-2015-6512—
SQL injection vulnerability in the get_messages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows
23RIESGO
abrir ↗
Referência
CVE-2015-7047
CVE-2015-7047—
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
Referência
CVE-2015-7047
CVE-2015-7047—
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
Referência
CVE-2025-15671
CVE-2025-15671MEDIUM
Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-76996
CVE-2026-76996MEDIUM
SourceCodester Simple Online Food Ordering System view_order.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-62382
CVE-2026-62382MEDIUM
PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison
48RIESGO
abrir ↗
Referência
CVE-2026-16962
CVE-2026-16962MEDIUM
Tamara Checkout <= 1.9.9.20 - Unauthenticated Order Status Manipulation
33RIESGO
abrir ↗
Referência
CVE-2015-6827
CVE-2015-6827—
Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentica
23RIESGO
abrir ↗
Referência
CVE-2026-77000
CVE-2026-77000CRITICAL
WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow
48RIESGO
abrir ↗
Referência
CVE-2026-19221
CVE-2026-19221HIGH
Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite
41RIESGO
abrir ↗
Referência
CVE-2026-78167
CVE-2026-78167CRITICAL
EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication
48RIESGO
abrir ↗
← anteriorpágina 816 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.