Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-65013
CVE-2026-65013HIGH
Onlook tRPC Insecure Direct Object Reference via multiple procedures
41RIESGO
abrir ↗
Referência
CVE-2026-16126
CVE-2026-16126MEDIUM
zevorn rt-claw Swarm RPC Receiver swarm.c handle_rpc_request authorization
33RIESGO
abrir ↗
Referência
CVE-2017-0146
CVE-2017-0146HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2026-13142
CVE-2026-13142HIGH
Passwordless Login by VentraConnect < 1.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force
41RIESGO
abrir ↗
Referência
CVE-2026-16076
CVE-2026-16076MEDIUM
AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing
33RIESGO
abrir ↗
Referência
CVE-2026-16075
CVE-2026-16075MEDIUM
AstrBotDevs AstrBot session-listing Endpoint open_api.py OpenApiRoute.get_chat_sessions authorization
33RIESGO
abrir ↗
Referência
CVE-2018-15139
CVE-2018-15139—
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote
28RIESGO
abrir ↗
Referência
CVE-2016-0953
CVE-2016-0953—
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RIESGO
abrir ↗
Referência
CVE-2017-0147
CVE-2017-0147HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2026-91855
CVE-2026-91855MEDIUM
Open5GS PFCP Message handler.c denial of service
33RIESGO
abrir ↗
Referência
CVE-2018-20220
CVE-2018-20220—
An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. While the web interface requires authen
28RIESGO
abrir ↗
Referência
CVE-2018-20556
CVE-2018-20556—
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary
28RIESGO
abrir ↗
Referência
CVE-2026-82125
CVE-2026-82125MEDIUM
Schema & Structured Data for WP & AMP 1.46 - 1.65 - Unauthenticated Non-Public Comment Content Disclosure via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-82124
CVE-2026-82124MEDIUM
Schema & Structured Data for WP & AMP < 1.66 - Unauthenticated Password-Protected Post Content Disclosure via JSON-LD Schema Output
33RIESGO
abrir ↗
Referência
CVE-2026-78474
CVE-2026-78474MEDIUM
Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated Order and Customer Data Disclosure via 'btn_print' Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-77702
CVE-2026-77702MEDIUM
Eventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_token
33RIESGO
abrir ↗
Referência
CVE-2024-58385
CVE-2024-58385CRITICAL
Yonyou U8 CRM SQL Injection via fillbacksettingedit.php
48RIESGO
abrir ↗
Referência
CVE-2023-54398
CVE-2023-54398CRITICAL
Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet
48RIESGO
abrir ↗
Referência✓ VexDay Proof
Crafty Syntax Image Gallery 3.1g - Remote Code Execution
CVE-2006-1667—webappsphp
SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gal
23RIESGO
abrir ↗
Referência
CVE-2016-1106
CVE-2016-1106—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RIESGO
abrir ↗
Referência
CVE-2016-1524
CVE-2016-1524—
Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote
60RIESGO
abrir ↗
Referência
CVE-2026-76559
CVE-2026-76559MEDIUM
WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling
33RIESGO
abrir ↗
Referência
CVE-2016-1525
CVE-2016-1525—
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allow
60RIESGO
abrir ↗
Referência
CVE-2023-54398
CVE-2023-54398CRITICAL
Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet
48RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Simple Shop 2.0 - 'abs_path' Remote File Inclusion
CVE-2006-4052—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote att
28RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPSherpa - '/include/config.inc.php' Remote File Inclusion
CVE-2007-0495—webappsphp
PHP remote file inclusion vulnerability in include/config.inc.php in PhpSherpa allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PhotoFiltre Studio 8.1.1 - '.tif' Local Buffer Overflow
CVE-2007-2192—localwindows
Buffer overflow in Photofiltre Studio 8.1.1 allows user-assisted remote attackers to execute arbitrary code via a crafte
23RIESGO
abrir ↗
Referência
CVE-2018-18858
CVE-2018-18858—
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS.
23RIESGO
abrir ↗
Referência
CVE-2016-3646
CVE-2016-3646—
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS
28RIESGO
abrir ↗
Referência
CVE-2016-3670
CVE-2016-3670—
Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1
23RIESGO
abrir ↗
← anteriorpágina 821 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.