Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.266 exploits
Referência
CVE-2017-17613
CVE-2017-17613—
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php cati
23RIESGO
abrir ↗
Referência
CVE-2017-17613
CVE-2017-17613—
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php cati
23RIESGO
abrir ↗
Referência
CVE-2017-17614
CVE-2017-17614—
Food Order Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17614
CVE-2017-17614—
Food Order Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mole Group Pizza - 'manufacturers_id' SQL Injection
CVE-2008-5046—webappsphp
SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mole Group Rental Script - Authentication Bypass
CVE-2008-5047—webappsphp
SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2017-17616
CVE-2017-17616—
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Anti-Keylogger Elite 3.3.0 - 'AKEProtect.sys' Local Privilege Escalation
CVE-2008-5049—localwindows
Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other version
23RIESGO
abrir ↗
Referência
CVE-2017-17616
CVE-2017-17616—
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17617
CVE-2017-17617—
Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17618
CVE-2017-17618—
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17618
CVE-2017-17618—
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-49136
CVE-2026-49136HIGH
Banana Slides 0.4.0 Path Traversal via generate_image() in ai_service.py
21RIESGO
abrir ↗
Referência
CVE-2026-43624
CVE-2026-43624HIGH
F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()
21RIESGO
abrir ↗
Referência
CVE-2026-43623
CVE-2026-43623HIGH
microtar 0.1.0 Stack-Based Buffer Overflow via raw_to_header()
21RIESGO
abrir ↗
Referência
CVE-2017-17623
CVE-2017-17623—
Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ZeusCart 2.0 - 'category_list.php' SQL Injection
CVE-2008-5216—webappsphp
SQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execut
23RIESGO
abrir ↗
Referência
CVE-2017-17623
CVE-2017-17623—
Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FREEze Greetings 1.0 - Remote Password Retrieve
CVE-2008-5218—webappsphp
ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote a
23RIESGO
abrir ↗
Referência
CVE-2010-3428
CVE-2010-3428—
SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wPortfolio 0.3 - Admin Password Changing
CVE-2008-5221—webappsphp
The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not
23RIESGO
abrir ↗
Referência
CVE-2017-17624
CVE-2017-17624—
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat o
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AirvaeCommerce 3.0 - 'pid' SQL Injection
CVE-2008-5223—webappsphp
SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2026-10252
CVE-2026-10252MEDIUM
itsourcecode Online House Rental System manage_tenant.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2017-17624
CVE-2017-17624—
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat o
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TNT Forum 0.9.4 - Local File Inclusion
CVE-2008-5265—webappsphp
Directory traversal vulnerability in index.php in TNT Forum 0.9.4, when magic_quotes_gpc is disabled, allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2017-17625
CVE-2017-17625—
Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Clean CMS 1.5 - Blind SQL Injection
CVE-2008-5289—webappsphp
SQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2017-17625
CVE-2017-17625—
Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17626
CVE-2017-17626—
Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.
23RIESGO
abrir ↗
← anteriorpágina 425 / 743siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.