Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-7724
CVE-2026-7724LOW
PrefectHQ prefect Webhook/Notification validate_restricted_url toctou
28RIESGO
abrir ↗
Referência
CVE-2026-7823
CVE-2026-7823CRITICAL
Totolink A8000RU cstecgi.cgi setAppFilterCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-7822
CVE-2026-7822MEDIUM
itsourcecode Courier Management System print_pdets.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7812
CVE-2026-7812MEDIUM
54yyyu code-mcp MCP Tool server.py git_operation command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7811
CVE-2026-7811MEDIUM
54yyyu code-mcp MCP File server.py is_safe_path path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7741
CVE-2026-7741MEDIUM
CodeAstro Online Classroom studentlogin sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7725
CVE-2026-7725MEDIUM
PrefectHQ prefect GitRepository Pull storage.py argument injection
33RIESGO
abrir ↗
Referência
CVE-2023-0493
CVE-2023-0493MEDIUM
Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver
33RIESGO
abrir ↗
Referência
CVE-2023-0669
CVE-2023-0669HIGHbajo ataqueransomware
Fortra GoAnywhere MFT License Response Servlet Command Injection
100RIESGO
abrir ↗
Referência
CVE-2021-47985
CVE-2021-47985HIGH
Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2020-37254
CVE-2020-37254HIGH
Wondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path
41RIESGO
abrir ↗
Referência
CVE-2020-37253
CVE-2020-37253HIGH
Winstep 18.06.0096 Unquoted Service Path Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2019-25747
CVE-2019-25747HIGH
Network Inventory Advisor 5.0.26.0 Unquoted Service Path Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2026-34115
CVE-2026-34115CRITICAL
Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe_amazon.php
48RIESGO
abrir ↗
Referência
CVE-2026-11794
CVE-2026-11794HIGH
Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping
41RIESGO
abrir ↗
Referência
CVE-2026-87831
CVE-2026-87831MEDIUM
Checkout Field Manager < 7.9.7 - Subscriber+ Arbitrary Attachment Deletion via Customer Address Custom Field
33RIESGO
abrir ↗
Referência
CVE-2019-15107
CVE-2019-15107CRITICALbajo ataqueransomware
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RIESGO
abrir ↗
Referência
CVE-2026-87829
CVE-2026-87829MEDIUM
Checkout Field Manager < 7.9.7 - Subscriber+ Arbitrary Attachment Deletion via Unvalidated Attachment ID Reparenting
33RIESGO
abrir ↗
Referência
CVE-2026-88795
CVE-2026-88795CRITICAL
wpShopGermany IT-RECHT KANZLEI < 2.4 - Unauthenticated RCE via Predictable API Token
48RIESGO
abrir ↗
Referência
CVE-2018-17456
CVE-2018-17456—
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x be
60RIESGO
abrir ↗
Referência
CVE-2023-25187
CVE-2023-25187MEDIUM
An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures
33RIESGO
abrir ↗
Referência
CVE-2018-7921
CVE-2018-7921—
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjace
28RIESGO
abrir ↗
Referência
CVE-2026-59803
CVE-2026-59803HIGH
rpcx - Denial of Service via Gzip Decompression Bomb in Wire Protocol
41RIESGO
abrir ↗
Referência
CVE-2026-15500
CVE-2026-15500MEDIUM
AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-92468
CVE-2026-92468HIGH
microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-center
41RIESGO
abrir ↗
Referência
CVE-2026-15506
CVE-2026-15506HIGH
SecureAge CatchPulse Driver saappctl.sys heap-based overflow
41RIESGO
abrir ↗
Referência
CVE-2023-26602
CVE-2023-26602—
ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create exten
28RIESGO
abrir ↗
Referência
CVE-2026-15187
CVE-2026-15187MEDIUM
enquirer Public Package API Enquirer.set prototype pollution
33RIESGO
abrir ↗
Referência
CVE-2026-92467
CVE-2026-92467HIGH
microservices-platform through 6.0.0 Unverified Password Change via /users/password
41RIESGO
abrir ↗
Referência
CVE-2023-27350
CVE-2023-27350CRITICALbajo ataqueransomware
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RIESGO
abrir ↗
← anteriorpágina 844 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.