Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2015-3306
CVE-2015-3306CRITICALbajo ataque
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
100RIESGO
abrir ↗
Referência
CVE-2026-91830
CVE-2026-91830MEDIUM
Subscribe to Comments < 2.3.3 - Unauthenticated Subscription Management Key Disclosure via Forged Comment Cookie
33RIESGO
abrir ↗
Referência
CVE-2026-111148
CVE-2026-111148MEDIUM
libsidplayfp through 3.1.1 Heap Out-of-Bounds Read via SidTuneBase::acceptSidTune
33RIESGO
abrir ↗
Referência
CVE-2026-91833
CVE-2026-91833MEDIUM
WX Subscribe <= 1.2.1 - Unauthenticated SQLi via 'attach' Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-111145
CVE-2026-111145MEDIUM
ytnef through 2.1.2 Heap Out-of-Bounds Read via DecompressRTF
33RIESGO
abrir ↗
Referência
CVE-2026-110876
CVE-2026-110876MEDIUM
AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play_note in XSM Files
33RIESGO
abrir ↗
Referência
CVE-2026-111234
CVE-2026-111234HIGH
SimplePie through 1.9.0 Local File Read via file:// Redirect
41RIESGO
abrir ↗
Referência
CVE-2026-110769
CVE-2026-110769HIGH
holaOS through 2026.822.1 Missing Authorization in Channel-Gateway Connectors
41RIESGO
abrir ↗
Referência
CVE-2026-112013
CVE-2026-112013MEDIUM
libtta through 2.3 Divide by Zero via tta_decoder_init_get_info
33RIESGO
abrir ↗
Referência
CVE-2020-14871
CVE-2020-14871CRITICALbajo ataque
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve
100RIESGO
abrir ↗
Referência
CVE-2026-111233
CVE-2026-111233LOW
Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php
28RIESGO
abrir ↗
Referência
CVE-2026-111227
CVE-2026-111227MEDIUM
Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php
33RIESGO
abrir ↗
Referência
CVE-2026-111226
CVE-2026-111226HIGH
Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php
41RIESGO
abrir ↗
Referência
CVE-2026-111221
CVE-2026-111221—
3RIESGO
abrir ↗
Referência
CVE-2026-112012
CVE-2026-112012MEDIUM
libtta through 2.3 Stack Out-of-Bounds Write via Zero Channel Count
33RIESGO
abrir ↗
Referência
CVE-2026-111225
CVE-2026-111225LOW
Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh
28RIESGO
abrir ↗
Referência
CVE-2026-94257
CVE-2026-94257HIGH
SMS Alert 3.9.6 - 4.0.2 - Unauthenticated Privilege Escalation via Arbitrary Password Reset
41RIESGO
abrir ↗
Referência
CVE-2026-110631
CVE-2026-110631CRITICAL
Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration
48RIESGO
abrir ↗
Referência
CVE-2026-108707
CVE-2026-108707CRITICAL
Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect
48RIESGO
abrir ↗
Referência
CVE-2026-108810
CVE-2026-108810MEDIUM
tsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure
33RIESGO
abrir ↗
Referência
CVE-2015-7243
CVE-2015-7243—
Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly
50RIESGO
abrir ↗
Referência
CVE-2015-7257
CVE-2015-7257—
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrato
23RIESGO
abrir ↗
Referência
CVE-2015-7258
CVE-2015-7258—
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain
28RIESGO
abrir ↗
Referência
CVE-2015-7297
CVE-2015-7297—
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un
60RIESGO
abrir ↗
Referência
CVE-2015-7450
CVE-2015-7450CRITICALbajo ataque
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and
100RIESGO
abrir ↗
Referência
Mara CMS 7.5 - Reflective Cross-Site Scripting
CVE-2020-24223—webappsphp
Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.
43RIESGO
abrir ↗
Referência
CVE-2020-24949
CVE-2020-24949—
Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a cr
50RIESGO
abrir ↗
Referência
CVE-2026-108707
CVE-2026-108707CRITICAL
Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect
48RIESGO
abrir ↗
Referência
CVE-2020-25213
CVE-2020-25213CRITICALbajo ataque
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra
100RIESGO
abrir ↗
Referência
CVE-2020-2555
CVE-2020-2555CRITICALbajo ataque
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su
100RIESGO
abrir ↗
← anteriorpágina 860 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.