Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.287exploits catalogados
36.046CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.721GitHub PoC 14.458VulnCheck XDB 8811Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.657 exploits
Referência
CVE-2026-8193
CVE-2026-8193MEDIUM
Akaunting Invoice PDF Rendering dompdf.php server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-8192
CVE-2026-8192MEDIUM
Wavlink NU516U1 adm.cgi wzdap os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-9579
CVE-2026-9579MEDIUM
JeecgBoot SysUser userEdit user.getUsername access control
33RIESGO
abrir ↗
Referência
CVE-2026-9567
CVE-2026-9567MEDIUM
GPAC MP4Box isom_intern.c MergeFragment null pointer dereference
33RIESGO
abrir ↗
Referência
OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)
CVE-2026-46368HIGHlocalmultiple
luci-app-https-dns-proxy Authenticated Command Injection via setInitAction
41RIESGO
abrir ↗
Referência
CVE-2026-41468
CVE-2026-41468CRITICAL
Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template Injection
48RIESGO
abrir ↗
Referência
CVE-2026-41469
CVE-2026-41469MEDIUM
Beghelli Sicuro24 SicuroWeb Missing Content Security Policy
33RIESGO
abrir ↗
Referência
CVE-2026-6564
CVE-2026-6564MEDIUM
EMQ EMQX Enterprise Session Handling improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-41469
CVE-2026-41469MEDIUM
Beghelli Sicuro24 SicuroWeb Missing Content Security Policy
33RIESGO
abrir ↗
Referência
CVE-2026-3254
CVE-2026-3254LOW
Improper Restriction of Rendered UI Layers or Frames in GitLab
28RIESGO
abrir ↗
Referência
CVE-2026-6497
CVE-2026-6497MEDIUM
prasathmani TinyFileManager File Upload filemanager.php server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-6496
CVE-2026-6496MEDIUM
prasathmani TinyFileManager POST Parameter filemanager.php path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-6493
CVE-2026-6493MEDIUM
lukevella rallly Reset Password reset-password-form.tsx cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2025-65135
CVE-2025-65135CRITICAL
In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin
48RIESGO
abrir ↗
Referência
CVE-2026-6224
CVE-2026-6224MEDIUM
nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox
33RIESGO
abrir ↗
Referência
CVE-2026-6220
CVE-2026-6220MEDIUM
HummerRisk Video File Download URL ServerService.java ServerService.addServer server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-6219
CVE-2026-6219MEDIUM
aandrew-me ytDownloader Compressor Feature compressor.js child_process.exec command injection
33RIESGO
abrir ↗
Referência
CVE-2026-6218
CVE-2026-6218MEDIUM
aandrew-me ytDownloader Error Details Panel createTextNode cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-6202
CVE-2026-6202MEDIUM
code-projects Easy Blog Site post.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-6201
CVE-2026-6201MEDIUM
CodeAstro Online Job Portal Delete Job Posting job-delete.php access control
33RIESGO
abrir ↗
Referência
CVE-2026-6200
CVE-2026-6200HIGH
Tenda F456 webtypelibrary formwebtypelibrary stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-40043
CVE-2026-40043HIGH
Pachno 1.0.6 Authentication Bypass via runSwitchUser()
41RIESGO
abrir ↗
Referência
CVE-2026-4922
CVE-2026-4922HIGH
Cross-Site Request Forgery (CSRF) in GitLab
41RIESGO
abrir ↗
Referência
CVE-2025-0186
CVE-2025-0186MEDIUM
Allocation of Resources Without Limits or Throttling in GitLab
33RIESGO
abrir ↗
Referência
CVE-2025-3922
CVE-2025-3922MEDIUM
Allocation of Resources Without Limits or Throttling in GitLab
33RIESGO
abrir ↗
Referência
CVE-2025-6016
CVE-2025-6016MEDIUM
Allocation of Resources Without Limits or Throttling in GitLab
33RIESGO
abrir ↗
Referência
CVE-2025-9957
CVE-2025-9957LOW
Incorrect Authorization in GitLab
28RIESGO
abrir ↗
Referência
CVE-2026-1660
CVE-2026-1660MEDIUM
Allocation of Resources Without Limits or Throttling in GitLab
33RIESGO
abrir ↗
Referência
CVE-2026-5262
CVE-2026-5262HIGH
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
41RIESGO
abrir ↗
Referência
CVE-2026-5377
CVE-2026-5377MEDIUM
Incorrect Authorization in GitLab
33RIESGO
abrir ↗
← anteriorpágina 694 / 756siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.