Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.240 exploits

Referência

CVE-2026-82485

CVE-2026-82485MEDIUM

itsourcecode Sales and Inventory System pro_edit.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2019-8927

CVE-2019-8927—

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon

23RIESGO

abrir ↗

Referência

CVE-2021-30637

CVE-2021-30637—

htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.

23RIESGO

abrir ↗

Referência

CVE-2025-71382

CVE-2025-71382HIGH

MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering

41RIESGO

abrir ↗

Referência

CVE-2018-25421

CVE-2018-25421HIGH

Open STA Manager 2.3 Arbitrary File Download via Path Traversal

41RIESGO

abrir ↗

Referência

CVE-2018-25420

CVE-2018-25420HIGH

AiOPMSD Final 1.0.0 SQL Injection via watch.php

41RIESGO

abrir ↗

Referência

CVE-2018-25419

CVE-2018-25419HIGH

AiOPMSD Final 1.0.0 SQL Injection via genre.php

41RIESGO

abrir ↗

Referência

CVE-2026-8163

CVE-2026-8163HIGH

Infility Global < 2.15.19 - Subscriber+ SQL Injection via order Parameter

41RIESGO

abrir ↗

Referência

CVE-2017-17617

CVE-2017-17617—

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-17621

CVE-2017-17621—

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.

23RIESGO

abrir ↗

Referência

CVE-2017-17631

CVE-2017-17631—

Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-17631

CVE-2017-17631—

Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.

23RIESGO

abrir ↗

Referência

CVE-2026-8172

CVE-2026-8172HIGH

Simple Basic Contact Form <= 20250114 - Reflected XSS

41RIESGO

abrir ↗

Referência

CVE-2026-85007

CVE-2026-85007LOW

YT Player < 2.1.4 - Contributor+ Missing Authorization via ytp_ajax

28RIESGO

abrir ↗

Referência

CVE-2026-115259

CVE-2026-115259MEDIUM

Photo Engine < 6.6.0 - Author+ Arbitrary Content Modification via IDOR

33RIESGO

abrir ↗

Referência

CVE-2026-115245

CVE-2026-115245CRITICAL

Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload

48RIESGO

abrir ↗

Referência✓ VexDay Proof

THoRCMS 1.3.1 - 'phpbb_root_path' Remote File Inclusion

CVE-2006-3269—webappsphp

PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execut

23RIESGO

abrir ↗

Referência

CVE-2014-7863

CVE-2014-7863—

The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, O

60RIESGO

abrir ↗

Referência

CVE-2026-114270

CVE-2026-114270MEDIUM

GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure

33RIESGO

abrir ↗

Referência

CVE-2017-17633

CVE-2017-17633—

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php

23RIESGO

abrir ↗

Referência

CVE-2017-17639

CVE-2017-17639—

Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.

23RIESGO

abrir ↗

Referência

CVE-2014-9583

CVE-2014-9583—

common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC

60RIESGO

abrir ↗

Referência

CVE-2018-11445

CVE-2018-11445—

A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing

23RIESGO

abrir ↗

Referência

CVE-2017-12500

CVE-2017-12500—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found

28RIESGO

abrir ↗

Referência

CVE-2017-2522

CVE-2017-2522—

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS

23RIESGO

abrir ↗

Referência

CVE-2026-11522

CVE-2026-11522HIGH

Tenda W20E setPortMirror formSetPortMirror stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2017-6550

CVE-2017-6550—

Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow

CVE-2007-1709—localwindows

Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows contex

23RIESGO

abrir ↗

Referência

CVE-2017-0092

CVE-2017-0092—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RIESGO

abrir ↗

Referência

CVE-2026-115281

CVE-2026-115281MEDIUM

Recipe Card Blocks 3.5.0 - 3.6.3 - Contributor+ SQLi via 'recipeId' Attribute

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.