Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2018-6084
CVE-2018-6084—
Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local
23RIESGO
abrir ↗
Referência
CVE-2026-82629
CVE-2026-82629MEDIUM
jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2019-6272
CVE-2019-6272—
Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attacker
28RIESGO
abrir ↗
Referência
CVE-2026-103695
CVE-2026-103695HIGH
Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' Parameter
41RIESGO
abrir ↗
Referência
CVE-2026-82623
CVE-2026-82623MEDIUM
open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free
33RIESGO
abrir ↗
Referência
CVE-2026-16252
CVE-2026-16252MEDIUM
Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection
33RIESGO
abrir ↗
Referência
CVE-2021-48016
CVE-2021-48016CRITICAL
DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php
48RIESGO
abrir ↗
Referência
CVE-2018-25439
CVE-2018-25439HIGH
MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-14347
CVE-2019-14347—
Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an ad
23RIESGO
abrir ↗
Referência
CVE-2018-25438
CVE-2018-25438HIGH
Intermesh Group-Office < 3.5.5 Path Traversal via compress.php
41RIESGO
abrir ↗
Referência
CVE-2017-20288
CVE-2017-20288MEDIUM
QCubed 3.1.1 Reflected XSS via installer step_2.php
33RIESGO
abrir ↗
Referência✓ VexDay Proof
osTicket 1.12 - Persistent Cross-Site Scripting via File Upload
CVE-2019-14748—webappsphp
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upl
23RIESGO
abrir ↗
Referência
CVE-2019-14750
CVE-2019-14750—
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It w
43RIESGO
abrir ↗
Referência
CVE-2026-14561
CVE-2026-14561MEDIUM
Authora - Easy Login with Mobile Number < 1.7.7 - Unauthenticated Account Takeover via OTP Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-14927
CVE-2026-14927LOW
FluentCart < 1.5.3 - Unauthenticated Order PII Disclosure via Print Routes
28RIESGO
abrir ↗
Referência
CVE-2026-14922
CVE-2026-14922MEDIUM
WP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment
33RIESGO
abrir ↗
Referência
CVE-2014-3792
CVE-2014-3792—
Cross-site request forgery (CSRF) vulnerability in Beetel 450TC2 Router with firmware TX6-0Q-005_retail allows remote at
23RIESGO
abrir ↗
Referência
CVE-2014-3977
CVE-2014-3977—
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
23RIESGO
abrir ↗
Referência
CVE-2019-1652
CVE-2019-1652HIGHbajo ataque
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
100RIESGO
abrir ↗
Referência
CVE-2026-94244
CVE-2026-94244MEDIUM
Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export
33RIESGO
abrir ↗
Referência
CVE-2026-94501
CVE-2026-94501HIGH
jshERP through 3.6 Privilege Escalation via userBusiness CRUD
41RIESGO
abrir ↗
Referência
CVE-2026-87846
CVE-2026-87846MEDIUM
Shipping for Nova Poshta 1.18.7 - 1.19.8 - Unauthenticated Order Shipment Record Deletion
33RIESGO
abrir ↗
Referência
CVE-2026-85348
CVE-2026-85348MEDIUM
GDPR Data Request Form 1.5 - 1.7.1 - DPO Email Update via CSRF
33RIESGO
abrir ↗
Referência
CVE-2026-107640
CVE-2026-107640CRITICAL
Integrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset API
48RIESGO
abrir ↗
Referência
CVE-2019-1652
CVE-2019-1652HIGHbajo ataque
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
100RIESGO
abrir ↗
Referência
CVE-2026-86827
CVE-2026-86827MEDIUM
BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php
33RIESGO
abrir ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHbajo ataque
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RIESGO
abrir ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHbajo ataque
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RIESGO
abrir ↗
Referência
CVE-2026-105196
CVE-2026-105196LOW
LatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities API
28RIESGO
abrir ↗
Referência
CVE-2026-58592
CVE-2026-58592HIGH
Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM Integration
41RIESGO
abrir ↗
← anteriorpágina 857 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.