Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-111976
CVE-2026-111976MEDIUM
GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route
33RIESGO
abrir ↗
Referência
CVE-2026-110285
CVE-2026-110285MEDIUM
WP Stripe Checkout < 1.2.2.62 - Unauthenticated Forged Payment Completion via an Unset Webhook Signing Secret
33RIESGO
abrir ↗
Referência
CVE-2026-81153
CVE-2026-81153MEDIUM
Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Overlay Effect Meta
33RIESGO
abrir ↗
Referência
CVE-2026-108522
CVE-2026-108522MEDIUM
Studio-Saelix Sencho Login Endpoint login improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-86717
CVE-2026-86717CRITICAL
Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup
48RIESGO
abrir ↗
Referência
CVE-2026-86706
CVE-2026-86706CRITICAL
Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update
48RIESGO
abrir ↗
Referência
CVE-2026-84254
CVE-2026-84254CRITICAL
click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update
48RIESGO
abrir ↗
Referência
CVE-2026-81156
CVE-2026-81156MEDIUM
Robo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery Settings
33RIESGO
abrir ↗
Referência
CVE-2026-81155
CVE-2026-81155MEDIUM
Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label
33RIESGO
abrir ↗
Referência
CVE-2026-15723
CVE-2026-15723HIGH
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
41RIESGO
abrir ↗
Referência
CVE-2026-81154
CVE-2026-81154MEDIUM
Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt Text
33RIESGO
abrir ↗
Referência
CVE-2026-92800
CVE-2026-92800HIGH
Docs before 5.4.1 Stale Collaboration Session After Access Revocation
41RIESGO
abrir ↗
Referência
CVE-2026-89262
CVE-2026-89262HIGH
MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check
41RIESGO
abrir ↗
Referência
CVE-2026-86301
CVE-2026-86301MEDIUM
code-projects Hospital Information System Patient Management editPatient.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-86300
CVE-2026-86300MEDIUM
Tenda AC9 Web Management R7WebsSecurityHandler improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-86272
CVE-2026-86272MEDIUM
Beijing Meite Software Technology U+Smart Enjoyment WebSite UploadFormImg.ashx unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-86271
CVE-2026-86271MEDIUM
FluentCMS PermissionManager.cs GetAccessible authorization
33RIESGO
abrir ↗
Referência
CVE-2026-86270
CVE-2026-86270MEDIUM
itsourcecode Sales and Inventory System settings_edit.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-123032
CVE-2026-123032MEDIUM
OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-118071
CVE-2026-118071MEDIUM
Joinchat 6.3.2 - 6.4.1 - Author+ Stored XSS via Button Block Message Attribute
33RIESGO
abrir ↗
Referência
CVE-2015-20130
CVE-2015-20130MEDIUM
Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php
33RIESGO
abrir ↗
Referência
CVE-2015-20130
CVE-2015-20130MEDIUM
Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php
33RIESGO
abrir ↗
Referência
CVE-2026-118165
CVE-2026-118165MEDIUM
Firelight Lightbox < 2.3.23 - Contributor+ Stored XSS via Lightbox Link 'href' Attribute
33RIESGO
abrir ↗
Referência
CVE-2026-118101
CVE-2026-118101MEDIUM
BuddyForms < 2.10.1 - Subscriber+ Arbitrary Post Modification
33RIESGO
abrir ↗
Referência
CVE-2026-118100
CVE-2026-118100MEDIUM
BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-118072
CVE-2026-118072MEDIUM
Fraud Prevention For WooCommerce and EDD < 2.3.6 - Subscriber+ Arbitrary Customer Blacklisting
33RIESGO
abrir ↗
Referência
CVE-2026-86794
CVE-2026-86794HIGH
Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form
41RIESGO
abrir ↗
Referência
CVE-2026-110504
CVE-2026-110504MEDIUM
Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization Bypass
33RIESGO
abrir ↗
Referência
CVE-2026-123028
CVE-2026-123028MEDIUM
itsourcecode Online Book Store admin_edit.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-110030
CVE-2026-110030MEDIUM
Hide Price Until Login < 1.1.2 - Unauthenticated Account Creation via Guest Registration
33RIESGO
abrir ↗
← anteriorpágina 873 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.