Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
86.991 exploits
Exploit-DB✓ VexDay Proof
Foodspotting Clone Script 1.0 - 'quicksearch.php?q' SQL Injection
CVE-2017-17617—webappsphp11 dic 2017
Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
23RIESGO
abrir ↗
Exploit-DB
Linux Kernel - 'The Huge Dirty Cow' Overwriting The Huge Zero Page (2)
CVE-2017-1000405—doslinux11 dic 2017
The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Readymade Video Sharing Script 3.2 - SQL Injection
CVE-2017-17627—webappsphp11 dic 2017
Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.
23RIESGO
abrir ↗
Exploit-DB
Basic Job Site Script 2.0.5 - SQL Injection
CVE-2017-17642—webappsphp11 dic 2017
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Resume Clone Script 2.0.5 - SQL Injection
CVE-2017-17641—webappsphp11 dic 2017
Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Freelance Website Script 2.0.6 - 'pr_id' / 'catid' SQL Injection
CVE-2017-17613—webappsphp11 dic 2017
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php cati
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Facebook Clone Script 1.0 - 'id' / 'send' SQL Injection
CVE-2017-17615—webappsphp11 dic 2017
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
23RIESGO
abrir ↗
Exploit-DB
MLM Forex Market Plan Script 2.0.4 - 'newid' / 'eventid' SQL Injection
CVE-2017-17635—webappsphp11 dic 2017
MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eve
23RIESGO
abrir ↗
Metasploit600
Palo Alto Networks readSessionVarsFromFile() Session Corruption
CVE-2017-15944CRITICALbajo ataque11 dic 2017
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS - 'getrusage' Stack Leak Through struct Padding
CVE-2017-13869—dosmacos11 dic 2017
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b
23RIESGO
abrir ↗
Exploit-DB
LibTIFF pal2rgb 4.0.9 - Heap Buffer Overflow
CVE-2017-17095—doslinux11 dic 2017
tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-b
28RIESGO
abrir ↗
Exploit-DB
Advanced World Database 2.0.5 - SQL Injection
CVE-2017-17640—webappsphp11 dic 2017
Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country pa
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS - 'necp_get_socket_attributes' so_pcb Type Confusion
CVE-2017-13855—dosmacos11 dic 2017
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS b
23RIESGO
abrir ↗
Exploit-DB
Vanguard 1.4 - Arbitrary File Upload
CVE-2017-17874—webappsphp11 dic 2017
Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product
23RIESGO
abrir ↗
Exploit-DB
MikroTik 6.40.5 ICMP - Denial of Service
CVE-2017-17538—doshardware11 dic 2017
MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Car Rental Script 2.0.4 - 'val' SQL Injection
CVE-2017-17637—webappsphp11 dic 2017
Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.
23RIESGO
abrir ↗
Exploit-DB
Linux Kernel 4.13 (Debian 9) - Local Privilege Escalation
CVE-2017-16994—locallinux11 dic 2017
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Kickstarter Clone Acript 2.0 - 'projid' SQL Injection
CVE-2017-17618—webappsphp11 dic 2017
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Responsive Realestate Script 3.2 - 'property-list?tbud' SQL Injection
CVE-2017-17628—webappsphp11 dic 2017
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MLM Forced Matrix 2.0.9 - 'newid' SQL Injection
CVE-2017-17636—webappsphp11 dic 2017
MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Muslim Matrimonial Script 3.02 - 'succid' SQL Injection
CVE-2017-17639—webappsphp11 dic 2017
Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Hot Scripts Clone 3.1 - 'subctid' / 'mctid' SQL Injection
CVE-2017-17612—webappsphp11 dic 2017
Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Advanced Real Estate Script 4.0.7 - SQL Injection
CVE-2017-17603—webappsphp11 dic 2017
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Trademe Clone 1.0 - 'search' / 'id' SQL Injection
CVE-2017-17577—webappsphp09 dic 2017
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Amazon Clone 1.0 - SQL Injection
CVE-2017-17572—webappsphp09 dic 2017
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Ebay Clone 1.0 - 'id' / 'sub_category_id' / 'category_id' SQL Injection
CVE-2017-17573—webappsphp09 dic 2017
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id p
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Gigs Script 1.0 - 'cat' / 'sc' SQL Injection
CVE-2017-17576—webappsphp09 dic 2017
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or se
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Care Clone 1.0 - 'jobFrequency' / 'jobType' SQL Injection
CVE-2017-17574—webappsphp09 dic 2017
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Grubhub Clone 1.0 - 'keywords' SQL Injection
CVE-2017-17582—webappsphp09 dic 2017
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Foodpanda Clone 1.0 - SQL Injection
CVE-2017-17571—webappsphp09 dic 2017
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
23RIESGO
abrir ↗
← anteriorpágina 1068 / 2900siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.