Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.794exploits catalogados

36.057CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientes populares riesgo

22.721 exploits

Referência

CVE-2015-5465

CVE-2015-5465—

Silicon Integrated Systems WindowsXP Display Manager (aka VGA Driver Manager and VGA Display Manager) 6.14.10.3930 allow

23RIESGO

abrir ↗

Referência

CVE-2026-16595

CVE-2026-16595MEDIUM

WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-16590

CVE-2026-16590MEDIUM

WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-19244

CVE-2026-19244MEDIUM

HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control

33RIESGO

abrir ↗

Referência

CVE-2015-5520

CVE-2015-5520—

Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allow

23RIESGO

abrir ↗

Referência

CVE-2015-5531

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RIESGO

abrir ↗

Referência

CVE-2026-15215

CVE-2026-15215HIGH

Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation

41RIESGO

abrir ↗

Referência

CVE-2026-15214

CVE-2026-15214MEDIUM

Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR

33RIESGO

abrir ↗

Referência

CVE-2026-15032

CVE-2026-15032MEDIUM

wpDiscuz < 7.6.60 - Unauthenticated Stored XSS via Image URL Conversion

33RIESGO

abrir ↗

Referência

CVE-2026-19193 Proof of Concept

CVE-2026-19193HIGH

Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access control

41RIESGO

abrir ↗

Referência

CVE-2015-5534

CVE-2015-5534—

Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall before 1.8 allow remote attackers to hijack the aut

23RIESGO

abrir ↗

Referência

CVE-2022-50964

CVE-2022-50964MEDIUM

uBidAuction 2.0.1 myAuctions loose Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50964

CVE-2022-50964MEDIUM

uBidAuction 2.0.1 myAuctions loose Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50963

CVE-2022-50963MEDIUM

uBidAuction 2.0.1 myAuctions active Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50963

CVE-2022-50963MEDIUM

uBidAuction 2.0.1 myAuctions active Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50960

CVE-2022-50960MEDIUM

WordPress International Sms Contact Form 7 Integration 1.2 XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50959

CVE-2022-50959MEDIUM

WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php

33RIESGO

abrir ↗

Referência

CVE-2022-50958

CVE-2022-50958MEDIUM

WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php

33RIESGO

abrir ↗

Referência

CVE-2022-50957

CVE-2022-50957MEDIUM

Drupal avatar_uploader 7.x-1.0-beta8 Reflected XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50956

CVE-2022-50956MEDIUM

WordPress Plugin amministrazione-aperta 3.7.3 Local File Read

33RIESGO

abrir ↗

Referência

CVE-2022-50955

CVE-2022-50955MEDIUM

WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery

33RIESGO

abrir ↗

Referência

CVE-2022-50954

CVE-2022-50954MEDIUM

WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion

33RIESGO

abrir ↗

Referência

CVE-2022-50949

CVE-2022-50949MEDIUM

WordPress Plugin Videos sync PDF 1.7.4 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50948

CVE-2022-50948MEDIUM

Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting

33RIESGO

abrir ↗

Referência

CVE-2022-50947

CVE-2022-50947MEDIUM

WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50946

CVE-2022-50946MEDIUM

WordPress Plugin Netroics Blog Posts Grid 1.0 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2022-50945

CVE-2022-50945MEDIUM

WordPress 3dady Real-Time Web Stats 1.0 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2026-19068

CVE-2026-19068MEDIUM

itsourcecode Hospital Management System treatmentdetail.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2015-6811

CVE-2015-6811—

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlie

23RIESGO

abrir ↗

Referência

CVE-2015-6827

CVE-2015-6827—

Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentica

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.