Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados

40.804CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientes populares riesgo

26.494 exploits

Referência

CVE-2026-112088

CVE-2026-112088MEDIUM

Dav-ee dairy-management-system add.php mysqli_query sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-94273

CVE-2026-94273MEDIUM

Snap Finance <= 3.11.0 - Unauthenticated Payment Confirmation Forgery via snap_finance_complete_payment

33RIESGO

abrir ↗

Referência

CVE-2026-101038

CVE-2026-101038CRITICAL

FAST FAC1200R MmtAtePrase stack-based overflow

48RIESGO

abrir ↗

Referência

CVE-2026-101036

CVE-2026-101036MEDIUM

FLB-Music FLB-Music-Player createParsedTrack.ts path.join path traversal

33RIESGO

abrir ↗

Referência

CVE-2025-10162

CVE-2025-10162HIGH

OrderConvo <= 15.1 - Unauthenticated Arbitrary File Read

56RIESGO

abrir ↗

Referência

CVE-2026-102293

CVE-2026-102293MEDIUM

realjerrytang tacomall api-admin Backend ApiMaApplication.java OrgStaffServiceImpl.add improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-101354

CVE-2026-101354CRITICAL

FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow

48RIESGO

abrir ↗

Referência

CVE-2026-101280

CVE-2026-101280MEDIUM

Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing

33RIESGO

abrir ↗

Referência

CVE-2026-101279

CVE-2026-101279MEDIUM

Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

33RIESGO

abrir ↗

Referência

CVE-2026-101278

CVE-2026-101278MEDIUM

Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation

33RIESGO

abrir ↗

Referência

CVE-2026-101071

CVE-2026-101071MEDIUM

Acrel Electric Unet Web Service Upload Endpoint upload unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2025-24813

CVE-2025-24813CRITICALbajo ataque

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RIESGO

abrir ↗

Referência

CVE-2026-101040

CVE-2026-101040HIGH

Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service

41RIESGO

abrir ↗

Referência

CVE-2026-89300

CVE-2026-89300MEDIUM

WP Verify API <= 1.0.0 - Unauthenticated Verification Code Email Sending to Arbitrary Recipients

33RIESGO

abrir ↗

Referência

CVE-2026-93000

CVE-2026-93000MEDIUM

SPS-Suite <= 1.4.0 - Unauthenticated Time-Based SQLi via Search

33RIESGO

abrir ↗

Referência

CVE-2026-89303

CVE-2026-89303MEDIUM

Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter

33RIESGO

abrir ↗

Referência

CVE-2026-101005

CVE-2026-101005MEDIUM

October CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-100909

CVE-2026-100909MEDIUM

OctoberCMS ResizeImages.php getSourcePathForResize server-side request forgery

33RIESGO

abrir ↗

Referência

CVE-2026-100908

CVE-2026-100908HIGH

Eyeplus p2pcam HTTP stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-90706

CVE-2026-90706MEDIUM

D-Link DWR-M921 formWsc os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-90705

CVE-2026-90705MEDIUM

D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-92399

CVE-2026-92399MEDIUM

GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2026-92364

CVE-2026-92364MEDIUM

itsourcecode Leave Management System index.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-89261

CVE-2026-89261MEDIUM

MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints

33RIESGO

abrir ↗

Referência

CVE-2026-86781

CVE-2026-86781MEDIUM

SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-19092

CVE-2026-19092CRITICAL

Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing

63RIESGO

abrir ↗

Referência

CVE-2026-76639

CVE-2026-76639HIGH

Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversal

41RIESGO

abrir ↗

Referência

CVE-2026-90607

CVE-2026-90607CRITICAL

Totolink A3002MU boa formNewSchedule buffer overflow

48RIESGO

abrir ↗

Referência

CVE-2025-68624

CVE-2025-68624MEDIUM

N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user

33RIESGO

abrir ↗

Referência

CVE-2026-84047

CVE-2026-84047HIGH

Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.