Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
84.035exploits catalogados
39.531CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientespopularesriesgo
4478 exploits
Nucleicritical
Scramble Laravel - Remote Code Execution
Scramble: Remote code execution via evaluation of user-controlled input in validation rules
63RIESGO
abrir ↗Nucleihigh
PraisonAI - Authentication Bypass
PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution
56RIESGO
abrir ↗Nucleicritical
WGDashboard < 4.3.2 - Unauthenticated File Read
WGDashboard: Critical Vulnerability in 4.3.2
43RIESGO
abrir ↗Nucleimedium
MISP < 2.5.37 - SQL Injection
MISP: SQL injection via unvalidated ordering parameters in event and shadow attribute listings
43RIESGO
abrir ↗Nucleicritical
Open WebUI 'LDAP Empty Password' - Authentication Bypass
Open WebUI: LDAP Empty Password Authentication Bypass
43RIESGO
abrir ↗Nucleihigh
Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials
Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users
56RIESGO
abrir ↗Nucleihigh
Dozzle - Server Side Request Forgery
Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)
36RIESGO
abrir ↗Nucleihigh
Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure
Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint
56RIESGO
abrir ↗Nucleimedium
Open WebUI < 0.9.5 - Information Disclosure
Open WebUI: Unauthenticated RAG Configuration Disclosure
28RIESGO
abrir ↗Nucleicritical
Kopia Server 0.23.0 - Remote Code Execution
Kopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used
43RIESGO
abrir ↗Nucleicritical
Cockpit Web Console < 360 - Remote Code Execution
Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection
63RIESGO
abrir ↗Nucleicritical
9Router <= 0.4.36 - Unauthenticated RCE
9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes
63RIESGO
abrir ↗Nucleicritical
phpMyFAQ <= 4.1.1 - SQL Injection
phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha
43RIESGO
abrir ↗Nucleihigh
SillyTavern - Server-Side Request Forgery
SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl
36RIESGO
abrir ↗Nucleicritical
Flowise < 3.1.2 - node-custom-function Unauthorized RCE
Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape
63RIESGO
abrir ↗Nucleicritical
YesWiki < 4.6.4 - Unauthenticated SQL Injection
YesWiki: Unauthenticated SQL Injection
43RIESGO
abrir ↗Nucleicritical
TYPO3 ceselector Extension - Insecure Deserialization
Remote Code Execution in extension "Content Element Selector" (ceselector)
43RIESGO
abrir ↗Nucleicritical
DbGate - Remote Code Execution via Anonymous JWT
DbGate: Unauthenticated Remote Code Execution via JSON Script Runner
63RIESGO
abrir ↗Nucleicritical
DbGate - Remote Code Execution via Dynamic Import Bypass
DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection
63RIESGO
abrir ↗Nucleihigh
FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure
FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations
36RIESGO
abrir ↗Nucleicritical
Pheditor 2.0.1-2.0.3 - OS Command Injection
Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)
63RIESGO
abrir ↗Nucleicritical
Google ADK-Python - Unauthenticated Builder Endpoint
Remote Code Execution in Google Agent Development Kit (ADK)
43RIESGO
abrir ↗Nucleicritical
Adobe ColdFusion - RDS Arbitrary File Write
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
100RIESGO
abrir ↗Nucleihigh
ColdFusion - Path Traversal
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
43RIESGO
abrir ↗Nucleicritical
SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass
SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
93RIESGO
abrir ↗Nucleicritical
phpBB < 3.3.17 - Authentication Bypass
Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or
63RIESGO
abrir ↗Nucleicritical
Starlette - Improper Validation of Unsafe Equivalence in Input
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
78RIESGO
abrir ↗Nucleicritical
Joomla! JCE extension < 2.9.99.5 unauthenticated RCE
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
98RIESGO
abrir ↗Nucleicritical
Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCE
Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
98RIESGO
abrir ↗Nucleihigh
JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write
Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler
56RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.