Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-81153
CVE-2026-81153MEDIUM
Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Overlay Effect Meta
33RIESGO
abrir ↗
Referência
CVE-2026-108522
CVE-2026-108522MEDIUM
Studio-Saelix Sencho Login Endpoint login improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-86717
CVE-2026-86717CRITICAL
Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup
48RIESGO
abrir ↗
Referência
CVE-2026-86706
CVE-2026-86706CRITICAL
Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update
48RIESGO
abrir ↗
Referência
CVE-2026-84254
CVE-2026-84254CRITICAL
click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update
48RIESGO
abrir ↗
Referência
CVE-2026-81156
CVE-2026-81156MEDIUM
Robo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery Settings
33RIESGO
abrir ↗
Referência
CVE-2026-81155
CVE-2026-81155MEDIUM
Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label
33RIESGO
abrir ↗
Referência
CVE-2026-15723
CVE-2026-15723HIGH
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
41RIESGO
abrir ↗
Referência
CVE-2026-81154
CVE-2026-81154MEDIUM
Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt Text
33RIESGO
abrir ↗
Referência
CVE-2026-105284
CVE-2026-105284CRITICAL
Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization
48RIESGO
abrir ↗
Referência
CVE-2026-105246
CVE-2026-105246MEDIUM
SourceCodester Online Reviewer Management System btn_functions.php update sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-78371
CVE-2026-78371MEDIUM
File Uploads Addon for WooCommerce 1.7.2 - 1.7.5 - Unauthenticated Customer Uploaded File Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-13718
CVE-2026-13718MEDIUM
Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content
33RIESGO
abrir ↗
Referência
CVE-2026-90988
CVE-2026-90988MEDIUM
Request a Quote <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure via emd_get_std_pagenum
33RIESGO
abrir ↗
Referência
CVE-2026-104123
CVE-2026-104123MEDIUM
SourceCodester Online Reviewer Management System btn_functions.php activity sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-118071
CVE-2026-118071MEDIUM
Joinchat 6.3.2 - 6.4.1 - Author+ Stored XSS via Button Block Message Attribute
33RIESGO
abrir ↗
Referência
CVE-2015-20130
CVE-2015-20130MEDIUM
Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php
33RIESGO
abrir ↗
Referência
CVE-2015-20130
CVE-2015-20130MEDIUM
Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php
33RIESGO
abrir ↗
Referência
CVE-2026-118165
CVE-2026-118165MEDIUM
Firelight Lightbox < 2.3.23 - Contributor+ Stored XSS via Lightbox Link 'href' Attribute
33RIESGO
abrir ↗
Referência
CVE-2026-118101
CVE-2026-118101MEDIUM
BuddyForms < 2.10.1 - Subscriber+ Arbitrary Post Modification
33RIESGO
abrir ↗
Referência
CVE-2026-118100
CVE-2026-118100MEDIUM
BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-118072
CVE-2026-118072MEDIUM
Fraud Prevention For WooCommerce and EDD < 2.3.6 - Subscriber+ Arbitrary Customer Blacklisting
33RIESGO
abrir ↗
Referência
CVE-2026-86794
CVE-2026-86794HIGH
Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form
41RIESGO
abrir ↗
Referência
CVE-2026-110504
CVE-2026-110504MEDIUM
Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization Bypass
33RIESGO
abrir ↗
Referência
CVE-2026-123028
CVE-2026-123028MEDIUM
itsourcecode Online Book Store admin_edit.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-110030
CVE-2026-110030MEDIUM
Hide Price Until Login < 1.1.2 - Unauthenticated Account Creation via Guest Registration
33RIESGO
abrir ↗
Referência
CVE-2026-108763
CVE-2026-108763MEDIUM
Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR
33RIESGO
abrir ↗
Referência
CVE-2024-3586
CVE-2024-3586LOW
LetterPress < 2.4.0 - Admin+ Stored XSS
28RIESGO
abrir ↗
Referência
CVE-2026-89216
CVE-2026-89216HIGH
vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter
41RIESGO
abrir ↗
Referência
CVE-2026-88928
CVE-2026-88928MEDIUM
PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypass
33RIESGO
abrir ↗
← anteriorpágina 875 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.