Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.449exploits catalogados
35.552CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.301 exploits
Referência
CVE-2021-47982
CVE-2021-47982MEDIUM
WordPress Plugin WP-Paginate 2.1.3 Stored XSS via preset
33RIESGO
abrir ↗
Referência
CVE-2026-11467
CVE-2026-11467MEDIUM
jishenghua jshERP addAccountHeadAndDetail Endpoint AccountHeadService.java path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-11463
CVE-2026-11463MEDIUM
USCiLab Cereal Shared Pointer type confusion
33RIESGO
abrir ↗
Referência
CVE-2026-11455
CVE-2026-11455LOW
FoundationAgents MetaGPT common.py check_cmd_exists command injection
28RIESGO
abrir ↗
Referência
CVE-2026-19383
CVE-2026-19383MEDIUM
saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-15148
CVE-2026-15148MEDIUM
WP Events Manager < 2.2.5 - Unauthenticated Payment Bypass and Booking Status Update via IDOR
33RIESGO
abrir ↗
Referência
CVE-2026-16265
CVE-2026-16265MEDIUM
WP Maps < 4.9.7 - Subscriber+ Denial of Service
33RIESGO
abrir ↗
Referência
CVE-2026-19195
CVE-2026-19195HIGH
V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control
41RIESGO
abrir ↗
Referência
CVE-2026-19193
CVE-2026-19193HIGH
Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access control
41RIESGO
abrir ↗
Referência
CVE-2026-37171
CVE-2026-37171MEDIUM
A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one
33RIESGO
abrir ↗
Referência
CVE-2026-70636
CVE-2026-70636HIGH
Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint
41RIESGO
abrir ↗
Referência
CVE-2026-67622
CVE-2026-67622HIGH
Flowise 3.1.4 IDOR in OpenAI Assistants Integration
41RIESGO
abrir ↗
Referência
CVE-2026-67621
CVE-2026-67621HIGH
Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints
41RIESGO
abrir ↗
Referência
CVE-2026-19110
CVE-2026-19110MEDIUM
DataGear Chart Name HtmlTplDashboardWidgetHtmlRenderer.java HtmlTplDashboardWidgetHtmlRenderer cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-19108
CVE-2026-19108MEDIUM
MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free
33RIESGO
abrir ↗
Referência
CVE-2026-19071
CVE-2026-19071MEDIUM
itsourcecode Hospital Management System viewappointment.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-19070
CVE-2026-19070MEDIUM
itsourcecode Hospital Management System viewadmin.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-19069
CVE-2026-19069MEDIUM
itsourcecode Hospital Management System treatmentrecord.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-19068
CVE-2026-19068MEDIUM
itsourcecode Hospital Management System treatmentdetail.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-19067
CVE-2026-19067MEDIUM
itsourcecode Hospital Management System treatment.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2025-15674
CVE-2025-15674LOW
Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API
28RIESGO
abrir ↗
Referência
CVE-2026-16620
CVE-2026-16620HIGH
WPC Name Your Price for WooCommerce < 2.2.5 - Unauthenticated Price Manipulation via Select Mode
41RIESGO
abrir ↗
Referência
CVE-2026-16619
CVE-2026-16619HIGH
miniOrange 2FA < 6.2.8 - 2FA Bypass via Unlimited Second-Factor Attempts
41RIESGO
abrir ↗
Referência
CVE-2026-19062
CVE-2026-19062MEDIUM
chiuwingyan house selectall.action sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-16067
CVE-2026-16067MEDIUM
Event Booking Manager for WooCommerce (Pro) < 5.0.3 - Unauthenticated Payment Bypass via Client-Controlled Ticket Price
33RIESGO
abrir ↗
Referência
CVE-2026-15256
CVE-2026-15256MEDIUM
Ninja Forms < 3.14.10 - Unauthenticated Arbitrary Shortcode Execution via Query-String Populated Field Default
33RIESGO
abrir ↗
Referência
CVE-2026-17032
CVE-2026-17032CRITICAL
Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
48RIESGO
abrir ↗
Referência
CVE-2026-13342
CVE-2026-13342MEDIUM
Security Optimizer – The All-In-One Protection Plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password
33RIESGO
abrir ↗
Referência
CVE-2026-15149
CVE-2026-15149MEDIUM
WP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price Manipulation
33RIESGO
abrir ↗
Referência
CVE-2026-15208
CVE-2026-15208MEDIUM
RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification
33RIESGO
abrir ↗
← anteriorpágina 475 / 744siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.