Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.020exploits catalogados

35.276CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8604Nuclei 4251Metasploit 3473✓ solo verificadosrecientes populares riesgo

22.166 exploits

Referência

CVE-2026-9424

CVE-2026-9424MEDIUM

Edimax EW-7438RPn Content-Type formWlanMP os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-9423

CVE-2026-9423MEDIUM

Edimax BR-6675nD POST Request mp command injection

33RIESGO

abrir ↗

Referência

CVE-2026-9419

CVE-2026-9419MEDIUM

code-projects Employee Management System empproject.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-9418

CVE-2026-9418MEDIUM

code-projects Employee Management System changepassemp.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-9404

CVE-2026-9404CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setDdnsCfg os command injection

48RIESGO

abrir ↗

Referência

CVE-2026-9403

CVE-2026-9403HIGH

Edimax BR-6675nD POST Request formWlSiteSurvey buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2021-47955

CVE-2021-47955MEDIUM

CouchCMS 2.2.1 Cross-Site Scripting via SVG File Upload

33RIESGO

abrir ↗

Referência

CVE-2021-47954

CVE-2021-47954HIGH

LayerBB 1.1.4 SQL Injection via search_query Parameter

41RIESGO

abrir ↗

Referência

CVE-2020-37228

CVE-2020-37228CRITICAL

iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass

48RIESGO

abrir ↗

Referência

CVE-2020-37227

CVE-2020-37227HIGH

WordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File Upload

41RIESGO

abrir ↗

Referência

CVE-2022-45899

CVE-2022-45899MEDIUM

Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as

33RIESGO

abrir ↗

Referência

CVE-2024-33724

CVE-2024-33724MEDIUM

SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.

48RIESGO

abrir ↗

Referência

CVE-2026-7709

CVE-2026-7709MEDIUM

janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-7708

CVE-2026-7708MEDIUM

Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-7700

CVE-2026-7700MEDIUM

langflow-ai langflow LambdaFilterComponent lambda_filter.p eval code injection

33RIESGO

abrir ↗

Referência

CVE-2026-7698

CVE-2026-7698MEDIUM

Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection

33RIESGO

abrir ↗

Referência

CVE-2026-7697

CVE-2026-7697MEDIUM

AMTT Hotel Broadband Operation System cardhand_submit.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7696

CVE-2026-7696MEDIUM

Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform uploadH5Files unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-7695

CVE-2026-7695MEDIUM

Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform elecMaxMinAvgValue sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14919

CVE-2026-14919CRITICAL

ShopMonitor.io < 1.2.0 - Unauthenticated Administrator Account Takeover via Password-Reset Email Reroute

48RIESGO

abrir ↗

Referência

CVE-2026-14862

CVE-2026-14862LOW

Support Genix Lite < 1.4.48 - Unauthenticated Ticket Attachment Download via Missing Authorization

28RIESGO

abrir ↗

Referência

CVE-2026-14799

CVE-2026-14799MEDIUM

CodeAstro Ecommerce Website my_account.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2025-14562

CVE-2025-14562LOW

Incorrect Authorization in GitLab

28RIESGO

abrir ↗

Referência

CVE-2026-3093

CVE-2026-3093MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-4672

CVE-2026-4672MEDIUM

Missing Authorization in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-6267

CVE-2026-6267HIGH

Insertion of Sensitive Information Into Sent Data in GitLab

41RIESGO

abrir ↗

Referência

CVE-2026-6336

CVE-2026-6336MEDIUM

Incorrect Authorization in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-12436

CVE-2026-12436HIGH

Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab

41RIESGO

abrir ↗

Referência

CVE-2026-14341

CVE-2026-14341MEDIUM

Missing Authorization in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-14351

CVE-2026-14351MEDIUM

Exposure of Sensitive Information Through Metadata in GitLab

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.