Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2025-15686
CVE-2025-15686MEDIUM
Open5GS HSS Service fd_msg_sess_get denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-73030
CVE-2026-73030HIGH
unearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape
41RIESGO
abrir ↗
Referência
CVE-2026-69116
CVE-2026-69116MEDIUM
FlyEnv < 4.18.0 Cross-Site Scripting via v-html
33RIESGO
abrir ↗
Referência
Vim < 8.1.1365 / Neovim < 0.3.6 - Arbitrary Code Execution
CVE-2019-12735—locallinux
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via th
28RIESGO
abrir ↗
Referência
CVE-2026-18470
CVE-2026-18470HIGH
Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response
41RIESGO
abrir ↗
Referência
CVE-2024-14042
CVE-2024-14042MEDIUM
Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow
33RIESGO
abrir ↗
Referência
CVE-2018-18924
CVE-2018-18924—
The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file
23RIESGO
abrir ↗
Referência
CVE-2026-111274
CVE-2026-111274MEDIUM
unarr through 1.1.1 Heap Out-of-Bounds Read via zip_parse_extra_fields
33RIESGO
abrir ↗
Referência
CVE-2026-69114
CVE-2026-69114HIGH
Spacebar Server Cross-Channel Message Deletion via Permission Check Bypass
41RIESGO
abrir ↗
Referência
CVE-2026-111150
CVE-2026-111150MEDIUM
ValleyBell libvgm through commit a6eed945 Heap Out-of-Bounds Read via DecompressDataBlk
33RIESGO
abrir ↗
Referência
CVE-2026-70622
CVE-2026-70622HIGH
tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all()
41RIESGO
abrir ↗
Referência
CVE-2025-15684
CVE-2025-15684MEDIUM
Open5GS CER init.c diam_log_func assertion
33RIESGO
abrir ↗
Referência
CVE-2020-11978
CVE-2020-11978HIGHbajo ataque
An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was disco
100RIESGO
abrir ↗
Referência
CVE-2024-14043
CVE-2024-14043MEDIUM
Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-114429
CVE-2026-114429MEDIUM
WP VR 8.5.49 - 9.0.2 - Contributor+ Stored XSS via Hotspot Content
33RIESGO
abrir ↗
Referência
CVE-2026-113674
CVE-2026-113674LOW
GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification
28RIESGO
abrir ↗
Referência
CVE-2026-66746
CVE-2026-66746MEDIUM
Rouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header Injection
33RIESGO
abrir ↗
Referência
CVE-2026-14798
CVE-2026-14798MEDIUM
CodeAstro Apartment Visitor Management System visitor-entry.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-19113
CVE-2018-19113—
The Pronestor PNHM (aka Health Monitoring or HealthMonitor) add-in before 8.1.13.0 for Outlook has "BUILTIN\Users:(I)(F)
23RIESGO
abrir ↗
Referência
CVE-2026-39931
CVE-2026-39931HIGH
OpenEMR Authenticated SQL Injection via backup.php Import Feature
41RIESGO
abrir ↗
Referência
CVE-2026-75976
CVE-2026-75976CRITICAL
TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2026-12584
CVE-2026-12584HIGH
Payment Gateway for Redsys & WooCommerce Lite < 7.0.2 - Unauthenticated Payment Confirmation via Unverified Inespay Callback
41RIESGO
abrir ↗
Referência
CVE-2026-113673
CVE-2026-113673HIGH
GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export
41RIESGO
abrir ↗
Referência
CVE-2026-15193
CVE-2026-15193MEDIUM
AidanPark openclaw-android Android WebView Bridge JsBridge.kt os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-15184
CVE-2026-15184MEDIUM
GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference
33RIESGO
abrir ↗
Referência
CVE-2024-14046
CVE-2024-14046MEDIUM
OpenBoxes Document Upload Controller DocumentController.groovy DocumentController unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-76991
CVE-2026-76991MEDIUM
itsourcecode Hospital Management System viewappointmentapproved.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-75985
CVE-2026-75985MEDIUM
TRENDnet Router ping.cgi command injection
33RIESGO
abrir ↗
Referência
CVE-2026-11766
CVE-2026-11766HIGH
Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields
41RIESGO
abrir ↗
Referência
CVE-2026-18598
CVE-2026-18598HIGH
GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection
41RIESGO
abrir ↗
← anteriorpágina 849 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.