Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.624 exploits
Referência
CVE-2026-14721
CVE-2026-14721HIGH
UTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-14719
CVE-2026-14719MEDIUM
SourceCodester Onlne Examination & Learning Management System Registration Endpoint register.php privileges management
33RIESGO
abrir ↗
Referência
CVE-2026-13562
CVE-2026-13562HIGH
Edimax EW-7478APC POST Request formiNICSiteSurvey buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-13559
CVE-2026-13559MEDIUM
code-projects Real State Services single-list_sale.php add sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-13514
CVE-2026-13514LOW
Chess Play and Learn App com.chess AndroidManifest.xml backup
28RIESGO
abrir ↗
Referência
CVE-2026-13513
CVE-2026-13513LOW
MyScale MyScaleDB SegmentId.h getCacheKey data authenticity
28RIESGO
abrir ↗
Referência
CVE-2026-13512
CVE-2026-13512MEDIUM
Databend Tenant client_session_manager.rs state_key authorization
33RIESGO
abrir ↗
Referência
CVE-2026-13511
CVE-2026-13511LOW
VoltAgent Memory REST API memory.handlers.ts handleGetMemoryConversation improper authorization
28RIESGO
abrir ↗
Referência
CVE-2026-13510
CVE-2026-13510MEDIUM
SimStudioAI sim Password Protection deployment.ts weak hash
33RIESGO
abrir ↗
Referência
CVE-2026-13509
CVE-2026-13509MEDIUM
RAGapp Knowledge File files.py FileHandler.remove_file path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-13508
CVE-2026-13508MEDIUM
khoj-ai khoj Conversation Sharing api_chat.py authorization
33RIESGO
abrir ↗
Referência
CVE-2026-13504
CVE-2026-13504MEDIUM
code-projects Project Management System Mail Compose mail.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-13500
CVE-2026-13500MEDIUM
antlr ANTLR4 Grammar Action Block OutputFile.java code injection
33RIESGO
abrir ↗
Referência
CVE-2026-57518
CVE-2026-57518HIGH
Pagekit CMS 1.0.18 Privilege Escalation via UserApiController
41RIESGO
abrir ↗
Referência
CVE-2026-45257
CVE-2026-45257HIGH
Arbitrary file overwrite via the KTLS receive path
41RIESGO
abrir ↗
Referência
CVE-2026-36908
CVE-2026-36908MEDIUM
A stack overflow in the AP4_Array<AP4_TrunAtom::Entry>::EnsureCapacity component of axiomatic-systems Bento4 before v1.8
33RIESGO
abrir ↗
Referência
CVE-2026-10753
CVE-2026-10753LOW
Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update
28RIESGO
abrir ↗
Referência
CVE-2026-12809
CVE-2026-12809MEDIUM
Edimax BR-6478AC V2 POST Request wiz_5in1_redirect command injection
33RIESGO
abrir ↗
Referência
CVE-2026-12673
CVE-2026-12673MEDIUM
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalati
33RIESGO
abrir ↗
Referência
CVE-2026-8935
CVE-2026-8935CRITICAL
Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation
48RIESGO
abrir ↗
Referência
CVE-2026-8386
CVE-2026-8386MEDIUM
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID
48RIESGO
abrir ↗
Referência
CVE-2026-8385
CVE-2026-8385MEDIUM
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback
48RIESGO
abrir ↗
Referência
CVE-2026-12223
CVE-2026-12223MEDIUM
Yealink SIP-T46U Web FastCGI Service tftpuploadiperf mod_webd.TFTPUploadIperf command injection
33RIESGO
abrir ↗
Referência
CVE-2026-12222
CVE-2026-12222HIGH
Yealink SIP-T46U Web FastCGI Service bttest mod_webd.BlueToothTest stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-12214
CVE-2026-12214HIGH
Qihoo 360 Total Security Nucleus Engine Monitoring Logic RpcStringBindingComposeW protection mechanism
41RIESGO
abrir ↗
Referência
CVE-2026-12211
CVE-2026-12211MEDIUM
Intelbras iNVU 7016 FT Web syslog path traversal
33RIESGO
abrir ↗
Referência
CVE-2017-20251
CVE-2017-20251CRITICAL
WordPress Insert PHP Plugin 4.7.0 PHP Code Injection via REST API
48RIESGO
abrir ↗
Referência
CVE-2026-25856
CVE-2026-25856HIGH
OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface
41RIESGO
abrir ↗
Referência
CVE-2026-11529
CVE-2026-11529MEDIUM
designcomputer mysql-mcp-server mysql URI server.py read_resource sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-10124
CVE-2026-10124HIGH
Shibby Tomato Zserv ripd rip_zebra_read_ipv4 stack-based overflow
41RIESGO
abrir ↗
← anteriorpágina 251 / 721siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.