Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.139exploits catalogados
40.879CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.555Exploit-DB 24.489GitHub PoC 18.366VulnCheck XDB 10.605Nuclei 4584Metasploit 3540✓ solo verificadosrecientespopularesriesgo
26.555 exploits
Referência
CVE-2026-115257
CVE-2026-115257MEDIUM
WP Roster < 2.36 - Unauthenticated Roster Data Modification
33RIESGO
abrir ↗
Referência
CVE-2026-115250
CVE-2026-115250MEDIUM
Text Typing < 2.2.2 - Contributor+ Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2026-115243
CVE-2026-115243MEDIUM
WPvivid Backup & Migration 0.9.117 - 0.9.136 - Admin+ Arbitrary File Upload via wpvivid_upload_import_files
33RIESGO
abrir ↗
Referência
CVE-2026-115242
CVE-2026-115242MEDIUM
WPvivid Backup & Migration < 0.9.137 - Admin+ Path Traversal via Staging Site Path
33RIESGO
abrir ↗
Referência
CVE-2026-114431
CVE-2026-114431MEDIUM
Enable Media Replace < 4.2.3 - Author+ Stored XSS via SVG Upload
33RIESGO
abrir ↗
Referência
CVE-2026-112244
CVE-2026-112244MEDIUM
Duplicator 5.0.0 - 5.0.6 - Unauthenticated Full Path Disclosure via Installer Entry Points
33RIESGO
abrir ↗
Referência
CVE-2026-112243
CVE-2026-112243MEDIUM
Duplicator < 5.1.0 - Reflected XSS via 'logname' Parameter
33RIESGO
abrir ↗
Referência
CVE-2026-111962
CVE-2026-111962LOW
WP Remote Users Sync < 2.2.0 - Unauthenticated Sensitive Data Disclosure via Public User Export File
28RIESGO
abrir ↗
Referência
CVE-2026-111740
CVE-2026-111740LOW
Post Duplicator < 3.0.17 - Contributor+ Draft and Private Post Title Disclosure
28RIESGO
abrir ↗
Referência
CVE-2026-110964
CVE-2026-110964MEDIUM
Essential Real Estate 4.4.3 - 5.3.4 - Subscriber+ Arbitrary Media Attachment Deletion via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-110692
CVE-2026-110692MEDIUM
PowerPack Addons for Elementor 2.10.0 - 3.1.2 - Contributor+ SSRF via Charts Widget CSV Import
33RIESGO
abrir ↗
Referência
CVE-2026-101165
CVE-2026-101165LOW
Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Payment Surcharge Bypass via update_surcharge_order_pay
28RIESGO
abrir ↗
Referência
CVE-2026-121617
CVE-2026-121617HIGH
Linksys E5600 Header upload_fw.cgi init_multipart out-of-bounds write
41RIESGO
abrir ↗
Referência
CVE-2026-87069
CVE-2026-87069LOW
Forminator Forms < 1.57.2.1 - Subscriber+ Form Stripe Field Migration via migrate_stripe
28RIESGO
abrir ↗
Referência
CVE-2026-94096
CVE-2026-94096CRITICAL
Netcore NBR200V2 LAN IP Configuration network_tools command injection
48RIESGO
abrir ↗
Referência
CVE-2026-19345
CVE-2026-19345MEDIUM
code-projects Task Management System UpdateTaskStatus.php authorization
33RIESGO
abrir ↗
Referência
CVE-2026-103306
CVE-2026-103306MEDIUM
iKhokha Payment Gateway < 3.0.4 - Unauthenticated Order Payment Forgery via Callback
33RIESGO
abrir ↗
Referência
CVE-2026-77884
CVE-2026-77884HIGH
Gallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposure
41RIESGO
abrir ↗
Referência
CVE-2026-103298
CVE-2026-103298MEDIUM
CCAvenue Payment Gateway for WooCommerce <= 3.1 - Unauthenticated Order Payment Completion via Webhook Forgery
33RIESGO
abrir ↗
Referência
CVE-2026-116116
CVE-2026-116116CRITICAL
Yoosee GM8135S Camera Secure Boot signature verification
48RIESGO
abrir ↗
Referência
CVE-2026-116099
CVE-2026-116099MEDIUM
Fusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write
33RIESGO
abrir ↗
Referência
CVE-2026-116097
CVE-2026-116097MEDIUM
CloudClassroom-PHP-Project addnewstudent.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-116063
CVE-2026-116063MEDIUM
DedeCMS update_guide.php require_once code injection
33RIESGO
abrir ↗
Referência
CVE-2026-116062
CVE-2026-116062MEDIUM
SourceCodester Performance Indicator System save_profile.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-19862
CVE-2026-19862MEDIUM
JetFormBuilder < 3.6.5.2 - Unauthenticated Email Header Injection via Send Email Action
33RIESGO
abrir ↗
Referência
CVE-2026-18722
CVE-2026-18722MEDIUM
diaowen DWSurvey dev-survey.do in DwDeisgnSurveyController.devSurvey. authorization
33RIESGO
abrir ↗
Referência
CVE-2026-16057
CVE-2026-16057MEDIUM
Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library
33RIESGO
abrir ↗
Referência
CVE-2026-86209
CVE-2026-86209MEDIUM
SourceCodester Class and Exam Timetabling System delete_user.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-86183
CVE-2026-86183MEDIUM
diem-project diem dmWidget BasedmWidgetActions.class.php authorization
33RIESGO
abrir ↗
Referência
CVE-2026-81737
CVE-2026-81737HIGH
FAQ Builder AYS 1.6.3 - 1.8.4 - Unauthenticated Stored XSS via ays_get_user_information
41RIESGO
abrir ↗
← anteriorpágina 878 / 886siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.