Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2026-69118

CVE-2026-69118HIGH

Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

41RIESGO

abrir ↗

Referência

CVE-2023-47268

CVE-2023-47268MEDIUM

In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrar

33RIESGO

abrir ↗

Referência

CVE-2024-46508

CVE-2024-46508HIGH

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting

41RIESGO

abrir ↗

Referência

CVE-2026-18934

CVE-2026-18934MEDIUM

RSS Aggregator by Feedzy < 5.2.6 - Author+ Cross-User Import Job Manipulation and Post Deletion

33RIESGO

abrir ↗

Referência

CVE-2026-18606

CVE-2026-18606HIGH

Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management

41RIESGO

abrir ↗

Referência

CVE-2026-39932

CVE-2026-39932CRITICAL

OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection

48RIESGO

abrir ↗

Referência

CVE-2021-47975

CVE-2021-47975MEDIUM

WordPress Plugin WP Learn Manager 1.1.2 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2021-47974

CVE-2021-47974HIGH

VX Search 13.5.28 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2021-47972

CVE-2021-47972HIGH

Sticky Notes & Color Widgets 1.4.2 Denial of Service

41RIESGO

abrir ↗

Referência

CVE-2021-47971

CVE-2021-47971HIGH

My Notes Safe 5.3 Denial of Service via Buffer Overflow

41RIESGO

abrir ↗

Referência

MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 - Local Privilege Escalation

CVE-2019-15084—localwindows

Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result,

23RIESGO

abrir ↗

Referência

CVE-2019-15107

CVE-2019-15107CRITICALbajo ataqueransomware

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RIESGO

abrir ↗

Referência

CVE-2026-14919

CVE-2026-14919CRITICAL

ShopMonitor.io < 1.2.0 - Unauthenticated Administrator Account Takeover via Password-Reset Email Reroute

48RIESGO

abrir ↗

Referência

CVE-2026-18788

CVE-2026-18788MEDIUM

Trippo ResponsiveFilemanager dialog.php unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-16583

CVE-2026-16583MEDIUM

Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload

33RIESGO

abrir ↗

Referência

CVE-2026-82922

CVE-2026-82922MEDIUM

ShopEx ECShop flow.php flow_update_cart sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13158

CVE-2026-13158HIGH

Everest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload

41RIESGO

abrir ↗

Referência

CVE-2026-18813

CVE-2026-18813HIGH

H3C NX15 esps delete command injection

41RIESGO

abrir ↗

Referência

CVE-2026-18996

CVE-2026-18996MEDIUM

cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment

33RIESGO

abrir ↗

Referência

CVE-2026-15258

CVE-2026-15258HIGH

Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter

41RIESGO

abrir ↗

Referência

CVE-2026-14930

CVE-2026-14930HIGH

JS Help Desk < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload

41RIESGO

abrir ↗

Referência

CVE-2026-14929

CVE-2026-14929MEDIUM

JS Help Desk < 3.1.4 - Subscriber+ Ticket Reply Modification via IDOR

33RIESGO

abrir ↗

Referência

CVE-2026-66031

CVE-2026-66031MEDIUM

Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field

33RIESGO

abrir ↗

Referência

CVE-2026-66030

CVE-2026-66030MEDIUM

Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field

33RIESGO

abrir ↗

Referência

CVE-2019-2725

CVE-2019-2725HIGHbajo ataqueransomware

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RIESGO

abrir ↗

Referência

CVE-2019-2725

CVE-2019-2725HIGHbajo ataqueransomware

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RIESGO

abrir ↗

Referência

CVE-2020-2038

CVE-2020-2038HIGH

PAN-OS: OS command injection vulnerability in the management web interface

78RIESGO

abrir ↗

Referência

CVE-2026-69114

CVE-2026-69114HIGH

Spacebar Server Cross-Channel Message Deletion via Permission Check Bypass

41RIESGO

abrir ↗

Referência

CVE-2026-66731

CVE-2026-66731HIGH

facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS

41RIESGO

abrir ↗

Referência

CVE-2026-110698

CVE-2026-110698MEDIUM

Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.