Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.137exploits catalogados
35.961CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
22.657 exploits
Referência✓ VexDay Proof
Girlserv ads 1.5 - 'details_news.php' SQL Injection
CVE-2007-3583—webappsphp
SQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vanilla 1.1.3 - Blind SQL Injection
CVE-2007-5643—webappsphp
Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Adult Script 1.6.5 - Multiple SQL Injections
CVE-2007-6576—webappsphp
Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2020-25762
CVE-2020-25762—
An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input v
28RIESGO
abrir ↗
Referência
CVE-2010-1600
CVE-2010-1600—
SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ASPSiteWare RealtyListing 1.0/2.0 - SQL Injection
CVE-2008-5772—webappsasp
Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2010-1493
CVE-2010-1493—
SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2010-1493
CVE-2010-1493—
SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2008-3749
CVE-2008-3749—
SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2026-19757
CVE-2026-19757MEDIUM
Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal
33RIESGO
abrir ↗
Referência
CVE-2008-5493
CVE-2008-5493—
SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2010-0981
CVE-2010-0981—
SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência
CVE-2010-0981
CVE-2010-0981—
SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência
CVE-2010-0614
CVE-2010-0614—
SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2010-0671
CVE-2010-0671—
SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2010-0671
CVE-2010-0671—
SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2010-4902
CVE-2010-4902—
Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attacke
23RIESGO
abrir ↗
Referência
CVE-2010-4503
CVE-2010-4503—
SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2020-27533
CVE-2020-27533—
A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to
23RIESGO
abrir ↗
Referência
CVE-2005-4416
CVE-2005-4416—
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência
CVE-2014-2043
CVE-2014-2043—
SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows re
23RIESGO
abrir ↗
Referência
CVE-2020-26629
CVE-2020-26629CRITICAL
A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows
48RIESGO
abrir ↗
Referência
CVE-2026-18601
CVE-2026-18601CRITICAL
GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection
48RIESGO
abrir ↗
Referência
CVE-2026-73515
CVE-2026-73515HIGH
PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer
41RIESGO
abrir ↗
Referência
CVE-2026-13610
CVE-2026-13610HIGH
KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Alstrasoft Forum - 'cat' SQL Injection
CVE-2008-3954—webappsphp
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2010-4844
CVE-2010-4844—
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2010-4844
CVE-2010-4844—
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2010-2676
CVE-2010-2676—
Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers
23RIESGO
abrir ↗
Referência
CVE-2010-2676
CVE-2010-2676—
Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers
23RIESGO
abrir ↗
← anteriorpágina 662 / 756siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.