Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-119733
CVE-2026-119733HIGH
Munshi Missing Authorization in Company Deletion API
41RIESGO
abrir ↗
Referência
CVE-2026-73697
CVE-2026-73697HIGH
Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor
41RIESGO
abrir ↗
Referência
CVE-2026-73696
CVE-2026-73696HIGH
Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex
41RIESGO
abrir ↗
Referência
CVE-2026-73695
CVE-2026-73695HIGH
Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.php
41RIESGO
abrir ↗
Referência
CVE-2026-120425
CVE-2026-120425HIGH
Chatify before 1.6.4 Pusher Authorization Bypass via /chat/auth Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-120344
CVE-2026-120344CRITICAL
WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-120343
CVE-2026-120343MEDIUM
mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-120336
CVE-2026-120336MEDIUM
VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-120322
CVE-2026-120322CRITICAL
Termix-SSH Termix transferToHost path traversal
48RIESGO
abrir ↗
Referência
CVE-2026-120320
CVE-2026-120320MEDIUM
jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserialization
33RIESGO
abrir ↗
Referência
CVE-2026-120278
CVE-2026-120278MEDIUM
WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-120277
CVE-2026-120277CRITICAL
WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-120234
CVE-2026-120234MEDIUM
ag-ui-protocol ag-ui HTTP Transport e.text resource consumption
33RIESGO
abrir ↗
Referência
CVE-2026-120233
CVE-2026-120233MEDIUM
ag-ui-protocol ag-ui HttpAgent http.ts information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-120232
CVE-2026-120232CRITICAL
Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruption
48RIESGO
abrir ↗
Referência
CVE-2026-120227
CVE-2026-120227CRITICAL
WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-118274
CVE-2026-118274MEDIUM
a2ui-project a2ui Binder generic-binder.ts resource consumption
33RIESGO
abrir ↗
Referência
CVE-2026-118273
CVE-2026-118273MEDIUM
a2ui-project a2ui data-model.ts DataModel.set resource consumption
33RIESGO
abrir ↗
Referência
CVE-2015-20129
CVE-2015-20129HIGH
CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/
41RIESGO
abrir ↗
Referência
CVE-2013-20007
CVE-2013-20007HIGH
Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi
41RIESGO
abrir ↗
Referência
CVE-2026-118272
CVE-2026-118272MEDIUM
a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure
33RIESGO
abrir ↗
Referência
CVE-2026-118271
CVE-2026-118271MEDIUM
a2ui-project a2ui data-context Resolver data-context.ts resource consumption
33RIESGO
abrir ↗
Referência
CVE-2026-116504
CVE-2026-116504CRITICAL
TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection
48RIESGO
abrir ↗
Referência
CVE-2026-116482
CVE-2026-116482MEDIUM
subhajitkhan online-clinic-management-system patientregistration.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-116339
CVE-2026-116339MEDIUM
iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist
33RIESGO
abrir ↗
Referência
CVE-2026-116255
CVE-2026-116255MEDIUM
PGYER codefever URI Sanitizer doc.php _detail path traversal
33RIESGO
abrir ↗
Referência
CVE-2010-20125
CVE-2010-20125HIGH
DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php
41RIESGO
abrir ↗
Referência
CVE-2026-117572
CVE-2026-117572MEDIUM
WP Visitor Statistics (Real Time Traffic) < 8.8 - Admin+ SQLi via 'order' Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-117571
CVE-2026-117571HIGH
WP Visitor Statistics (Real Time Traffic) < 8.8 - Unauthenticated Stored XSS via Tracker Device Parameters
41RIESGO
abrir ↗
Referência
CVE-2026-110691
CVE-2026-110691MEDIUM
WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update
33RIESGO
abrir ↗
← anteriorpágina 874 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.