Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-85408
CVE-2026-85408MEDIUM
Eleveo Quality Management Conversation events dynamically-determined object attributes
33RIESGO
abrir ↗
Referência
CVE-2026-75799
CVE-2026-75799CRITICAL
YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cache
48RIESGO
abrir ↗
Referência
CVE-2026-93662
CVE-2026-93662MEDIUM
Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-93661
CVE-2026-93661LOW
Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR
28RIESGO
abrir ↗
Referência
CVE-2026-89005
CVE-2026-89005MEDIUM
WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Word to Category
33RIESGO
abrir ↗
Referência
CVE-2026-114264
CVE-2026-114264MEDIUM
ProjectWorlds Advanced Library Management System edit_member.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-114263
CVE-2026-114263MEDIUM
ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-51773
CVE-2026-51773HIGH
An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously
41RIESGO
abrir ↗
Referência
CVE-2026-94211
CVE-2026-94211MEDIUM
Hyve5 Leantime Project Dashboard show.blade.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-96881
CVE-2026-96881MEDIUM
TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-96739
CVE-2026-96739MEDIUM
SEMCMS KindEditor Upload upload_json.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-89078
CVE-2026-89078CRITICAL
Double Free in GitLab
48RIESGO
abrir ↗
Referência
CVE-2021-42136
CVE-2021-42136—
A stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes functionality of REDCap before 11.4.0 allows
23RIESGO
abrir ↗
Referência
CVE-2021-42165
CVE-2021-42165—
MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing c
28RIESGO
abrir ↗
Referência
CVE-2021-42751
CVE-2021-42751—
A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrat
23RIESGO
abrir ↗
Referência
CVE-2026-93577
CVE-2026-93577CRITICAL
Integer Overflow or Wraparound in GitLab
48RIESGO
abrir ↗
Referência
CVE-2026-96549
CVE-2026-96549MEDIUM
sfturing hosp_order CommonUserServiceImpl.java cleartext storage
33RIESGO
abrir ↗
Referência
CVE-2026-94535
CVE-2026-94535HIGH
lamp-cloud through 5.10.0 Unauthorized Notification Deletion
41RIESGO
abrir ↗
Referência
CVE-2026-94210
CVE-2026-94210MEDIUM
Hyve5 Leantime Kanban Board Tickets.php getAllGrouped cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-114262
CVE-2026-114262MEDIUM
file-management-system FileController.php store unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-96678
CVE-2026-96678MEDIUM
weiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-96552
CVE-2026-96552LOW
sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
28RIESGO
abrir ↗
Referência
CVE-2026-96551
CVE-2026-96551MEDIUM
sfturing hosp_order CommonUserController.java cross-site request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-92400
CVE-2026-92400MEDIUM
Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via Sandbox IPN Environment Confusion
33RIESGO
abrir ↗
Referência
CVE-2026-86446
CVE-2026-86446LOW
LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint
28RIESGO
abrir ↗
Referência
CVE-2026-87071
CVE-2026-87071MEDIUM
Forminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted Posts
33RIESGO
abrir ↗
Referência
CVE-2026-94493
CVE-2026-94493CRITICAL
Gigatech PDV5701 WebSocket Service index.html missing authentication
48RIESGO
abrir ↗
Referência
CVE-2026-94426
CVE-2026-94426MEDIUM
xuxueli xxl-job insert cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-94151
CVE-2026-94151MEDIUM
Omega Solution HRM OS Role Permission API permission missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-94150
CVE-2026-94150MEDIUM
Omega Solution HRM OS SVG File Upload view cross site scripting
33RIESGO
abrir ↗
← anteriorpágina 868 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.