Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2026-108546

CVE-2026-108546HIGH

Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration

41RIESGO

abrir ↗

Referência

CVE-2026-104638

CVE-2026-104638MEDIUM

onetwothreeneth HospitalManagementSystem sessions.php improper authentication

33RIESGO

abrir ↗

Referência

CVE-2014-3138

CVE-2014-3138—

SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1

23RIESGO

abrir ↗

Referência

CVE-2026-108545

CVE-2026-108545HIGH

SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

41RIESGO

abrir ↗

Referência

CVE-2026-13553

CVE-2026-13553MEDIUM

itsourcecode Online Hotel Management System controller.php add unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2018-7739

CVE-2018-7739—

antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Webmin 1.920 - Unauthenticated Remote Code Execution (Metasploit)

CVE-2019-15107CRITICALbajo ataqueransomwareremotelinux

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RIESGO

abrir ↗

Referência

CVE-2014-3792

CVE-2014-3792—

Cross-site request forgery (CSRF) vulnerability in Beetel 450TC2 Router with firmware TX6-0Q-005_retail allows remote at

23RIESGO

abrir ↗

Referência

CVE-2014-3977

CVE-2014-3977—

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on

23RIESGO

abrir ↗

Referência

CVE-2019-1652

CVE-2019-1652HIGHbajo ataque

Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

100RIESGO

abrir ↗

Referência

CVE-2026-94244

CVE-2026-94244MEDIUM

Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export

33RIESGO

abrir ↗

Referência

CVE-2026-94501

CVE-2026-94501HIGH

jshERP through 3.6 Privilege Escalation via userBusiness CRUD

41RIESGO

abrir ↗

Referência

CVE-2026-87846

CVE-2026-87846MEDIUM

Shipping for Nova Poshta 1.18.7 - 1.19.8 - Unauthenticated Order Shipment Record Deletion

33RIESGO

abrir ↗

Referência

CVE-2026-85348

CVE-2026-85348MEDIUM

GDPR Data Request Form 1.5 - 1.7.1 - DPO Email Update via CSRF

33RIESGO

abrir ↗

Referência

CVE-2026-107640

CVE-2026-107640CRITICAL

Integrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset API

48RIESGO

abrir ↗

Referência

CVE-2019-1652

CVE-2019-1652HIGHbajo ataque

Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

100RIESGO

abrir ↗

Referência

CVE-2026-86827

CVE-2026-86827MEDIUM

BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php

33RIESGO

abrir ↗

Referência

CVE-2019-1653

CVE-2019-1653HIGHbajo ataque

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RIESGO

abrir ↗

Referência

CVE-2019-1653

CVE-2019-1653HIGHbajo ataque

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RIESGO

abrir ↗

Referência

CVE-2026-105196

CVE-2026-105196LOW

LatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities API

28RIESGO

abrir ↗

Referência

CVE-2026-58592

CVE-2026-58592HIGH

Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM Integration

41RIESGO

abrir ↗

Referência

CVE-2026-100892

CVE-2026-100892MEDIUM

aligungr UERANSIM nr-gnb handler.cpp ULInformationTransfer memory corruption

33RIESGO

abrir ↗

Referência

CVE-2026-111942

CVE-2026-111942MEDIUM

hrisikeshpal Blood_Bank_Management_System abs.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-96534

CVE-2026-96534HIGH

Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_fes_csv_export

41RIESGO

abrir ↗

Referência

CVE-2014-4971

CVE-2014-4971—

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write

43RIESGO

abrir ↗

Referência★ 1

CVE-2026-100886 | Unauthenticated Remote Code Execution toolkit.

CVE-2026-100886CRITICAL

Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication

48RIESGO

abrir ↗

Referência

CVE-2014-4977

CVE-2014-4977—

Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute

60RIESGO

abrir ↗

Referência

CVE-2026-100885

CVE-2026-100885MEDIUM

Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization

33RIESGO

abrir ↗

Referência

CVE-2026-14650

CVE-2026-14650MEDIUM

connorskees grass UTF-8 Character raw_to_parse_error denial of service

33RIESGO

abrir ↗

Referência

Codiad 2.8.4 - Remote Code Execution (Authenticated) (2)

CVE-2019-19208—webappsmultiple

Codiad Web IDE through 2.8.4 allows PHP Code injection.

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.