Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2016-1719
CVE-2016-1719—
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Referência
CVE-2026-104953
CVE-2026-104953MEDIUM
MPG < 4.2.3 - Editor+ SQLi via Project Import
33RIESGO
abrir ↗
Referência
CVE-2026-16737
CVE-2026-16737MEDIUM
WP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cart
33RIESGO
abrir ↗
Referência
CVE-2016-1719
CVE-2016-1719—
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Referência
CVE-2016-1719
CVE-2016-1719—
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Referência
CVE-2016-1721
CVE-2016-1721—
The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges o
23RIESGO
abrir ↗
Referência
CVE-2026-18465
CVE-2026-18465MEDIUM
WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion
33RIESGO
abrir ↗
Referência
CVE-2026-82613
CVE-2026-82613MEDIUM
itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-74928
CVE-2026-74928HIGH
WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation via Trello Import Routes
41RIESGO
abrir ↗
Referência
CVE-2026-78063
CVE-2026-78063MEDIUM
Tenda CH22 editFileName formeditFileName command injection
33RIESGO
abrir ↗
Referência
CVE-2020-7246
CVE-2020-7246—
A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code
60RIESGO
abrir ↗
Referência
CVE-2026-16538
CVE-2026-16538CRITICAL
TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up
48RIESGO
abrir ↗
Referência
CVE-2020-7247
CVE-2020-7247CRITICALbajo ataque
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to
100RIESGO
abrir ↗
Referência
CVE-2020-7247
CVE-2020-7247CRITICALbajo ataque
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to
100RIESGO
abrir ↗
Referência
CVE-2020-7247
CVE-2020-7247CRITICALbajo ataque
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to
100RIESGO
abrir ↗
Referência
CVE-2020-7247
CVE-2020-7247CRITICALbajo ataque
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to
100RIESGO
abrir ↗
Referência
CVE-2026-105438
CVE-2026-105438MEDIUM
O2OA General url ActionUploadExcelWithUrl server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-13607
CVE-2026-13607MEDIUM
File Uploads Addon for WooCommerce <= 1.7.6 - Unauthenticated Direct File Access
33RIESGO
abrir ↗
Referência
CVE-2026-105233
CVE-2026-105233MEDIUM
kishor-23 food-waste-management-system Login Flow login.php session fixiation
33RIESGO
abrir ↗
Referência
CVE-2026-77226
CVE-2026-77226CRITICAL
Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint
48RIESGO
abrir ↗
Referência
CVE-2026-105232
CVE-2026-105232MEDIUM
kishor-23 food-waste-management-system Registration deliverysignup.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-105231
CVE-2026-105231MEDIUM
kishor-23 food-waste-management-system Admin Registration signup.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-105226
CVE-2026-105226MEDIUM
osCommerce osCommerce2 Newsletter Management newsletters.php include code injection
33RIESGO
abrir ↗
Referência
CVE-2026-105184
CVE-2026-105184MEDIUM
itsourcecode Online Admission System creteria.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2016-2345
CVE-2016-2345—
Stack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote Control 12.0 allows rem
35RIESGO
abrir ↗
Referência
CVE-2016-2388
CVE-2016-2388MEDIUMbajo ataque
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user infor
75RIESGO
abrir ↗
Referência
CVE-2020-9496
CVE-2020-9496—
XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03
60RIESGO
abrir ↗
Referência
CVE-2026-105392
CVE-2026-105392MEDIUM
Lybbn Django-Vue-Lyadmin JWT Signing settings.py hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-105386
CVE-2026-105386MEDIUM
onetwothreeneth HospitalManagementSystem print.php get sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-104973
CVE-2026-104973HIGH
Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix in Webhook Delivery
41RIESGO
abrir ↗
← anteriorpágina 856 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.