Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-19999
CVE-2026-19999MEDIUM
Open Asset Import Library Assimp 3DGS MDL7 Bone Transformation Key MDLLoader.cpp ParseBoneTrafoKeys_3DGS_MDL7 buffer overflow
33RIESGO
abrir ↗
Referência
CVE-2026-19984
CVE-2026-19984MEDIUM
jkawamoto mcp-florence2 __init__.py get_images server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-15261
CVE-2026-15261MEDIUM
TI WooCommerce Wishlist < 2.13.0 - Unauthenticated Private Wishlist Disclosure via share_key
33RIESGO
abrir ↗
Referência
CVE-2026-111596
CVE-2026-111596MEDIUM
Kliken: Ads + Pixel for Meta < 1.2.3 - Unauthenticated Order Data Disclosure via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-75797
CVE-2026-75797HIGH
AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter
41RIESGO
abrir ↗
Referência
CVE-2026-78246
CVE-2026-78246MEDIUM
itsourcecode Online Clinic Management System Admin Login login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-78177
CVE-2026-78177LOW
TanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection
28RIESGO
abrir ↗
Referência
CVE-2026-19613
CVE-2026-19613MEDIUM
ECS < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source
33RIESGO
abrir ↗
Referência
CVE-2026-18653
CVE-2026-18653HIGH
WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameter
41RIESGO
abrir ↗
Referência
CVE-2026-74930
CVE-2026-74930MEDIUM
WP Project Manager 2.2.0 - 4.0.6 - Subscriber+ User Activity Feed Disclosure via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-19905
CVE-2026-19905MEDIUM
Jinher OA attendance_out_approve.aspx sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-74929
CVE-2026-74929MEDIUM
WP Project Manager < 4.0.7 - Subscriber+ Cross-Project Task Disclosure and Task Board Modification via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-14550
CVE-2026-14550MEDIUM
WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization
33RIESGO
abrir ↗
Referência
CVE-2026-14216
CVE-2026-14216MEDIUM
Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch
33RIESGO
abrir ↗
Referência
CVE-2026-78171
CVE-2026-78171MEDIUM
itsourcecode Sales and Inventory System processlogin.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-108853
CVE-2026-108853HIGH
UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/app
41RIESGO
abrir ↗
Referência
CVE-2026-86798
CVE-2026-86798HIGH
HootBoard <= 3.1.4 - Unauthenticated Stored XSS via Board Configuration REST Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-104082
CVE-2026-104082HIGH
SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount
41RIESGO
abrir ↗
Referência
CVE-2026-105470
CVE-2026-105470MEDIUM
girishsaraf Online-Appointment-Booking-System Doctor Search Endpoint locateus.php mysqli_query sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-105469
CVE-2026-105469MEDIUM
girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-105468
CVE-2026-105468MEDIUM
girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-102620
CVE-2026-102620MEDIUM
Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow
33RIESGO
abrir ↗
Referência
CVE-2026-101067
CVE-2026-101067MEDIUM
dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-101066
CVE-2026-101066MEDIUM
dbgate Archive Link Creation archive.js createLink path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-101037
CVE-2026-101037CRITICAL
FAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2026-101055
CVE-2026-101055MEDIUM
Thinkware U3000 TCP Service GET_STATUS information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-101035
CVE-2026-101035MEDIUM
aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception
33RIESGO
abrir ↗
Referência
CVE-2026-101016
CVE-2026-101016MEDIUM
Trusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional condition
33RIESGO
abrir ↗
Referência
CVE-2026-67622
CVE-2026-67622HIGH
Flowise 3.1.4 IDOR in OpenAI Assistants Integration
41RIESGO
abrir ↗
Referência
CVE-2026-67621
CVE-2026-67621HIGH
Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints
41RIESGO
abrir ↗
← anteriorpágina 867 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.