Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.063exploits catalogados
40.808CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4584Metasploit 3540✓ solo verificadosrecientespopularesriesgo
26.506 exploits
Referência
CVE-2026-121501
CVE-2026-121501MEDIUM
mathurvishal CloudClassroom-PHP-Project loginlinkadmin.php session_regenerate_id session fixiation
33RIESGO
abrir ↗
Referência
CVE-2026-121263
CVE-2026-121263MEDIUM
phpMyAdmin MoTranslator Loader.php getTranslator path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-121628
CVE-2026-121628MEDIUM
Bagisto before 2.3.16 and 2.4.x before 2.4.1 Race Condition in Coupon Usage Accounting
33RIESGO
abrir ↗
Referência
CVE-2026-121262
CVE-2026-121262MEDIUM
phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion
33RIESGO
abrir ↗
Referência
CVE-2026-121261
CVE-2026-121261MEDIUM
phpMyAdmin ShapeFile SHP File loadFromFile infinite loop
33RIESGO
abrir ↗
Referência
CVE-2026-119740
CVE-2026-119740HIGH
Nexbox A95X Amlogic S905X UART Unauthenticated Console Access
41RIESGO
abrir ↗
Referência
CVE-2026-119733
CVE-2026-119733HIGH
Munshi Missing Authorization in Company Deletion API
41RIESGO
abrir ↗
Referência
CVE-2026-73697
CVE-2026-73697HIGH
Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor
41RIESGO
abrir ↗
Referência
CVE-2026-73696
CVE-2026-73696HIGH
Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex
41RIESGO
abrir ↗
Referência
CVE-2026-73695
CVE-2026-73695HIGH
Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.php
41RIESGO
abrir ↗
Referência
CVE-2026-120425
CVE-2026-120425HIGH
Chatify before 1.6.4 Pusher Authorization Bypass via /chat/auth Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-120344
CVE-2026-120344CRITICAL
WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-120343
CVE-2026-120343MEDIUM
mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-120336
CVE-2026-120336MEDIUM
VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow
33RIESGO
abrir ↗
Referência
CVE-2026-120322
CVE-2026-120322CRITICAL
Termix-SSH Termix transferToHost path traversal
48RIESGO
abrir ↗
Referência
CVE-2026-120320
CVE-2026-120320MEDIUM
jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserialization
33RIESGO
abrir ↗
Referência
CVE-2026-120278
CVE-2026-120278MEDIUM
WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-120277
CVE-2026-120277CRITICAL
WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-120234
CVE-2026-120234MEDIUM
ag-ui-protocol ag-ui HTTP Transport e.text resource consumption
33RIESGO
abrir ↗
Referência
CVE-2026-120233
CVE-2026-120233MEDIUM
ag-ui-protocol ag-ui HttpAgent http.ts information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-120232
CVE-2026-120232CRITICAL
Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruption
48RIESGO
abrir ↗
Referência
CVE-2026-120227
CVE-2026-120227CRITICAL
WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-118274
CVE-2026-118274MEDIUM
a2ui-project a2ui Binder generic-binder.ts resource consumption
33RIESGO
abrir ↗
Referência
CVE-2026-118273
CVE-2026-118273MEDIUM
a2ui-project a2ui data-model.ts DataModel.set resource consumption
33RIESGO
abrir ↗
Referência
CVE-2015-20129
CVE-2015-20129HIGH
CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/
41RIESGO
abrir ↗
Referência
CVE-2013-20007
CVE-2013-20007HIGH
Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi
41RIESGO
abrir ↗
Referência
CVE-2026-118272
CVE-2026-118272MEDIUM
a2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure
33RIESGO
abrir ↗
Referência
CVE-2026-118271
CVE-2026-118271MEDIUM
a2ui-project a2ui data-context Resolver data-context.ts resource consumption
33RIESGO
abrir ↗
Referência
CVE-2026-116504
CVE-2026-116504CRITICAL
TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection
48RIESGO
abrir ↗
Referência
CVE-2026-116482
CVE-2026-116482MEDIUM
subhajitkhan online-clinic-management-system patientregistration.php cross site scripting
33RIESGO
abrir ↗
← anteriorpágina 877 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.