Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.430exploits catalogados
35.543CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.367GitHub PoC 14.209VulnCheck XDB 8646Nuclei 4283Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.301 exploits
Referência
CVE-2026-34107
CVE-2026-34107CRITICAL
Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate.php
48RIESGO
abrir ↗
Referência
CVE-2011-0512
CVE-2011-0512—
SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2026-34106
CVE-2026-34106CRITICAL
Guardian Language-System Unauthenticated OS Command Injection via id Parameter in subtitles.php
48RIESGO
abrir ↗
Referência✓ VexDay Proof
zBlog 1.2 - SQL Injection
CVE-2007-6577—webappsphp
Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Wallpaper Site 1.0.09 - 'category.php' SQL Injection
CVE-2007-6580—webappsphp
Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
1024 CMS 1.3.1 - Local File Inclusion / SQL Injection
CVE-2007-6584—webappsphp
Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary l
23RIESGO
abrir ↗
Referência
CVE-2026-10293
CVE-2026-10293HIGH
UTT HiPER 1200GW formFireWall strcpy stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2013-2751
CVE-2013-2751—
Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator
60RIESGO
abrir ↗
Referência
CVE-2011-0519
CVE-2011-0519—
SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows
23RIESGO
abrir ↗
Referência
CVE-2026-13567
CVE-2026-13567MEDIUM
code-projects Online Music Site POST Request Feedback.php cross site scripting
33RIESGO
abrir ↗
Referência✓ VexDay Proof
samPHPweb 4.2.2 - 'songinfo.php' SQL Injection
CVE-2008-0187—webappsphp
SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2026-8254
CVE-2026-8254MEDIUM
Devs Palace ERP Online sales_save cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2011-0642
CVE-2011-0642—
Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2026-13542
CVE-2026-13542MEDIUM
itsourcecode Hospital Management System doctorprofile.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Xforum 1.4 - 'topic' SQL Injection
CVE-2008-0279—webappsphp
SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2023-54347
CVE-2023-54347HIGH
OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass
41RIESGO
abrir ↗
Referência
CVE-2013-3535
CVE-2013-3535—
Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência
CVE-2011-0652
CVE-2011-0652—
lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service (cras
23RIESGO
abrir ↗
Referência
CVE-2013-3629
CVE-2013-3629—
ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution
50RIESGO
abrir ↗
Referência
CVE-2013-3632
CVE-2013-3632HIGH
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users
68RIESGO
abrir ↗
Referência✓ VexDay Proof
LulieBlog 1.02 - SQL Injection
CVE-2008-0446—webappsphp
SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Foojan Wms 1.0 - 'story' SQL Injection
CVE-2008-0447—webappsphp
SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Easysitenetwork Recipe - 'categoryId' SQL Injection
CVE-2008-0453—webappsphp
SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2026-5832
CVE-2026-5832MEDIUM
atototo api-lab-mcp HTTP http-server.ts test_http_endpoint server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-5830
CVE-2026-5830HIGH
Tenda AC15 SysToolChangePwd websGetVar stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5829
CVE-2026-5829MEDIUM
code-projects Simple IT Discussion Forum content.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5828
CVE-2026-5828MEDIUM
code-projects Simple IT Discussion Forum addcomment.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5827
CVE-2026-5827MEDIUM
code-projects Simple IT Discussion Forum question-function.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5826
CVE-2026-5826MEDIUM
code-projects Simple IT Discussion Forum edit-category.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-5705
CVE-2026-5705MEDIUM
code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting
33RIESGO
abrir ↗
← anteriorpágina 456 / 744siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.