Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.836exploits catalogados

32.133CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8156Nuclei 4201Metasploit 3462✓ solo verificadosrecientes populares riesgo

4201 exploits

Nucleihigh

WCAPF WooCommerce Ajax Product Filter - SQL Injection

CVE-2026-3396HIGH

WCAPF – WooCommerce Ajax Product Filter <= 4.2.3 - Unauthenticated Time-Based SQL Injection

36RIESGO

abrir ↗

Nucleicritical

LiteLLM - Command Injection

CVE-2026-42271HIGHbajo ataque

LiteLLM: Authenticated command execution via MCP stdio test endpoints

100RIESGO

abrir ↗

Nucleicritical

MagicMirror <= 2.35.0 - Server-Side Request Forgery

CVE-2026-42281CRITICAL

MagicMirror²: Unauthenticated SSRF via /cors endpoint

43RIESGO

abrir ↗

Nucleicritical

phpVMS < 7.0.6 - Legacy Importer Authorization Bypass

CVE-2026-42569CRITICAL

phpvms: /importer authorization bypass causing full database wipe

43RIESGO

abrir ↗

Nucleicritical

WordPress Contact Form by Supsystic - Server-Side Template Injection

CVE-2026-4257CRITICAL

Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality

75RIESGO

abrir ↗

Nucleicritical

Gotenberg - Command Injection

CVE-2026-42589CRITICAL

Gotenberg: Unauthenticated RCE via ExifTool Metadata Key Injection

63RIESGO

abrir ↗

Nucleicritical

JoomSport <= 5.7.7 - SQL Injection

CVE-2026-42647CRITICAL

WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability

63RIESGO

abrir ↗

Nucleicritical

Scramble Laravel - Remote Code Execution

CVE-2026-44262CRITICAL

Scramble: Remote code execution via evaluation of user-controlled input in validation rules

63RIESGO

abrir ↗

Nucleicritical

Open WebUI 'LDAP Empty Password' - Authentication Bypass

CVE-2026-44551CRITICAL

Open WebUI: LDAP Empty Password Authentication Bypass

43RIESGO

abrir ↗

Nucleihigh

Dozzle - Server Side Request Forgery

CVE-2026-45298HIGH

Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)

36RIESGO

abrir ↗

Nucleimedium

Open WebUI < 0.9.5 - Information Disclosure

CVE-2026-45397MEDIUM

Open WebUI: Unauthenticated RAG Configuration Disclosure

28RIESGO

abrir ↗

Nucleicritical

Cockpit Web Console < 360 - Remote Code Execution

CVE-2026-4631CRITICAL

Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection

68RIESGO

abrir ↗

Nucleicritical

9Router <= 0.4.36 - Unauthenticated RCE

CVE-2026-46339CRITICAL

9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

43RIESGO

abrir ↗

Nucleicritical

phpMyFAQ <= 4.1.1 - SQL Injection

CVE-2026-46364CRITICAL

phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha

43RIESGO

abrir ↗

Nucleihigh

SillyTavern - Server-Side Request Forgery

CVE-2026-46372HIGH

SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

36RIESGO

abrir ↗

Nucleicritical

Flowise < 3.1.2 - node-custom-function Unauthorized RCE

CVE-2026-46442CRITICAL

Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

63RIESGO

abrir ↗

Nucleicritical

TYPO3 ceselector Extension - Insecure Deserialization

CVE-2026-46725CRITICAL

Remote Code Execution in extension "Content Element Selector" (ceselector)

43RIESGO

abrir ↗

Nucleicritical

Google ADK-Python - Unauthenticated Builder Endpoint

CVE-2026-4810CRITICAL

Remote Code Execution in Google Agent Development Kit (ADK)

43RIESGO

abrir ↗

Nucleicritical

Adobe ColdFusion - RDS Arbitrary File Write

CVE-2026-48282CRITICAL

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

68RIESGO

abrir ↗

Nucleihigh

ColdFusion - Path Traversal

CVE-2026-48313CRITICAL

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

43RIESGO

abrir ↗

Nucleicritical

phpBB < 3.3.17 - Authentication Bypass

CVE-2026-48611CRITICAL

Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or

63RIESGO

abrir ↗

Nucleicritical

Starlette - Improper Validation of Unsafe Equivalence in Input

CVE-2026-48710MEDIUM

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

48RIESGO

abrir ↗

Nucleicritical

Joomla! JCE extension < 2.9.99.5 unauthenticated RCE

CVE-2026-48907CRITICALbajo ataque

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

100RIESGO

abrir ↗

Nucleicritical

WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE

CVE-2026-49777CRITICAL

WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

63RIESGO

abrir ↗

Nucleimedium

Apache Tomcat - Cross-Site Scripting

CVE-2026-50229MEDIUM

Apache Tomcat: XSS in number guess example

48RIESGO

abrir ↗

Nucleimedium

Lyrion Music Server <= 9.2.0 - Cross-Site Scripting

CVE-2026-50230MEDIUM

Lyrion Music Server 9.2.0 Reflected XSS via server.log

28RIESGO

abrir ↗

Nucleihigh

Langflow <= 1.8.4 - Path Traversal to RCE via File Upload

CVE-2026-5027HIGH

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RIESGO

abrir ↗

Nucleicritical

WordPress ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection

CVE-2026-5073HIGH

ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' Parameter

36RIESGO

abrir ↗

Nucleicritical

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

CVE-2026-50751CRITICALbajo ataqueransomware

User Authentication Bypass in VPN Remote Access and Mobile Access

100RIESGO

abrir ↗

Nucleilow

Gogs < 0.14.3 - Unauthenticated Organization Teams Disclosure

CVE-2026-52815MEDIUM

Gogs: Unauthenticated Organization Teams Information Disclosure via API

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.