Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.532exploits catalogados

35.607CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.246VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.332 exploits

Referência

CVE-2026-15692

CVE-2026-15692HIGH

Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-15691

CVE-2026-15691HIGH

Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-15690

CVE-2026-15690LOW

open62541 Shared Client ua_client_connect.c responseReadNamespacesArray null pointer dereference

28RIESGO

abrir ↗

Referência

CVE-2026-15678

CVE-2026-15678MEDIUM

code-projects Online Job Portal DetailJob.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-15677

CVE-2026-15677MEDIUM

code-projects Online Job Portal JobSeekerInsert.php unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-15676

CVE-2026-15676MEDIUM

code-projects Online Job Portal DeleteUser.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-12988

CVE-2026-12988MEDIUM

WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding

33RIESGO

abrir ↗

Referência

CVE-2026-12583

CVE-2026-12583HIGH

Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field

41RIESGO

abrir ↗

Referência

CVE-2026-15675

CVE-2026-15675MEDIUM

code-projects Online Job Portal EditUser.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11883

CVE-2026-11883HIGH

WebAuthn Provider for Two Factor < 2.5.6 - 2FA Bypass

41RIESGO

abrir ↗

Referência

CVE-2026-11880

CVE-2026-11880LOW

Fluent Forms < 6.2.1 - Subscriber+ Subscription Cancellation via IDOR

28RIESGO

abrir ↗

Referência

CVE-2026-58172

CVE-2026-58172CRITICAL

Ocelot - IP Allow/Block List Bypass for WebSocket Upgrade Requests

48RIESGO

abrir ↗

Referência

CVE-2026-58166

CVE-2026-58166HIGH

OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete

41RIESGO

abrir ↗

Referência

CVE-2026-58116

CVE-2026-58116CRITICAL

LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path

48RIESGO

abrir ↗

Referência

CVE-2026-13580

CVE-2026-13580HIGH

Edimax EW-7478APC POST Request formQoS buffer overflow

41RIESGO

abrir ↗

Referência

CVE-2026-13545

CVE-2026-13545HIGH

D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection

41RIESGO

abrir ↗

Referência

CVE-2026-13544

CVE-2026-13544MEDIUM

Feehi CMS API users access control

33RIESGO

abrir ↗

Referência

CVE-2026-13541

CVE-2026-13541MEDIUM

itsourcecode Hospital Management System doctorchangepassword.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-13515

CVE-2026-13515HIGH

Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2025-12669

CVE-2025-12669MEDIUM

Improper Control of Generation of Code ('Code Injection') in GitLab

33RIESGO

abrir ↗

Referência

CVE-2020-37236

CVE-2020-37236MEDIUM

NewsLister Authenticated Persistent Cross-Site Scripting via Admin Panel

33RIESGO

abrir ↗

Referência

CVE-2020-37235

CVE-2020-37235MEDIUM

WordPress Theme Wibar 1.1.8 Stored Cross-Site Scripting via Brand Component

33RIESGO

abrir ↗

Referência

CVE-2020-37234

CVE-2020-37234MEDIUM

Internet Download Manager 6.38.12 Scheduler Buffer Overflow

33RIESGO

abrir ↗

Referência

CVE-2020-37233

CVE-2020-37233MEDIUM

WordPress Plugin Buddypress 6.2.0 Persistent Cross-Site Scripting

33RIESGO

abrir ↗

Referência

CVE-2020-37230

CVE-2020-37230HIGH

Syncplify.me Server! 5.0.37 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2020-37229

CVE-2020-37229HIGH

OKI sPSV Port Manager 1.0.41 Unquoted Service Path Privilege Escalation

41RIESGO

abrir ↗

Referência

CVE-2021-47965

CVE-2021-47965CRITICAL

WordPress Plugin WP Super Edit 2.5.4 Unrestricted File Upload

48RIESGO

abrir ↗

Referência

CVE-2025-13874

CVE-2025-13874MEDIUM

Authorization Bypass Through User-Controlled Key in GitLab

33RIESGO

abrir ↗

Referência

CVE-2025-14869

CVE-2025-14869HIGH

Improper Validation of Specified Quantity in Input in GitLab

41RIESGO

abrir ↗

Referência

CVE-2025-14870

CVE-2025-14870HIGH

Allocation of Resources Without Limits or Throttling in GitLab

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.