Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.620exploits catalogados

35.647CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8693Nuclei 4299Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.407 exploits

Referência

CVE-2019-20085

CVE-2019-20085HIGHbajo ataque

TVT NVMS-1000 devices allow GET /.. Directory Traversal

100RIESGO

abrir ↗

Referência

CVE-2019-20085

CVE-2019-20085HIGHbajo ataque

TVT NVMS-1000 devices allow GET /.. Directory Traversal

100RIESGO

abrir ↗

Referência

CVE-2019-20215

CVE-2019-20215—

D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the

60RIESGO

abrir ↗

Referência

CVE-2019-20499

CVE-2019-20499—

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Config

60RIESGO

abrir ↗

Referência

D-Link DWL-2600AP - Multiple OS Command Injection

CVE-2019-20499—webappshardware

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Config

60RIESGO

abrir ↗

Referência

D-Link DWL-2600AP - Multiple OS Command Injection

CVE-2019-20501—webappshardware

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmwa

45RIESGO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHbajo ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RIESGO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHbajo ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RIESGO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHbajo ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RIESGO

abrir ↗

Referência

CVE-2022-50969

CVE-2022-50969MEDIUM

uBidAuction 2.0.1 mailingLog manage Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50968

CVE-2022-50968MEDIUM

uBidAuction 2.0.1 auctions manage Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50967

CVE-2022-50967MEDIUM

uBidAuction 2.0.1 tickets manage Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50966

CVE-2022-50966MEDIUM

uBidAuction 2.0.1 news manage Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50966

CVE-2022-50966MEDIUM

uBidAuction 2.0.1 news manage Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2020-5752

CVE-2020-5752—

Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitra

38RIESGO

abrir ↗

Referência

CVE-2020-5791

CVE-2020-5791—

Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi

60RIESGO

abrir ↗

Referência

CVE-2019-2725

CVE-2019-2725HIGHbajo ataqueransomware

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RIESGO

abrir ↗

Referência

CVE-2019-2725

CVE-2019-2725HIGHbajo ataqueransomware

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RIESGO

abrir ↗

Referência

CVE-2026-8116

CVE-2026-8116MEDIUM

huangjunsen0406 xiaozhi-mcphub dxtController.ts path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-8115

CVE-2026-8115MEDIUM

gyoridavid short-video-maker REST API rest.ts path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-8114

CVE-2026-8114MEDIUM

JeecgBoot JSON Object loadTreeData sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7844

CVE-2026-7844MEDIUM

chatchat-space Langchain-Chatchat Compatible File Service openai_routes.py delete_file missing authentication

33RIESGO

abrir ↗

Referência

CVE-2026-7834

CVE-2026-7834CRITICAL

EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow

48RIESGO

abrir ↗

Referência

CVE-2026-7833

CVE-2026-7833HIGH

EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection

41RIESGO

abrir ↗

Referência

CVE-2026-7832

CVE-2026-7832HIGH

IObit Advanced SystemCare Service ASC.exe symlink

41RIESGO

abrir ↗

Referência

CVE-2023-54346

CVE-2023-54346HIGH

WordPress Plugin Backup Migration 1.2.8 Unauthenticated Database Backup Download

41RIESGO

abrir ↗

Referência

CVE-2023-54345

CVE-2023-54345HIGH

Frappe Framework ERPNext 13.4.0 Remote Code Execution

41RIESGO

abrir ↗

Referência

CVE-2023-54344

CVE-2023-54344CRITICAL

Eclipse Equinox OSGi 3.7.2 Remote Code Execution via Console

48RIESGO

abrir ↗

Referência

CVE-2023-54342

CVE-2023-54342CRITICAL

Eclipse Equinox OSGi 3.8-3.18 Console Remote Code Execution

48RIESGO

abrir ↗

Referência

CVE-2026-14790

CVE-2026-14790MEDIUM

GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.