Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2017-15986
CVE-2017-15986—
CPA Lead Reward Script allows SQL Injection via the username parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17583
CVE-2017-17583—
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17583
CVE-2017-17583—
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17584
CVE-2017-17584—
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Linux Kernel 2.6.17 < 2.6.24.1 - 'vmsplice' Local Privilege Escalation (2)
CVE-2008-0600—locallinux
The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer befo
23RIESGO
abrir ↗
Referência
CVE-2017-15964
CVE-2017-15964—
Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.
23RIESGO
abrir ↗
Referência
CVE-2015-5736
CVE-2015-5736—
The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel
23RIESGO
abrir ↗
Referência
CVE-2026-76071
CVE-2026-76071CRITICAL
Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter
48RIESGO
abrir ↗
Referência
CVE-2021-34369
CVE-2021-34369—
portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensiti
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Expose RC35 - Arbitrary File Upload
CVE-2007-3932—webappsphp
uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla! sends an error message but does not exit
23RIESGO
abrir ↗
Referência
CVE-2017-17574
CVE-2017-17574—
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-19995
CVE-2026-19995MEDIUM
Webkul Bagisto RMA Message send-message cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-75089
CVE-2026-75089MEDIUM
PHPGurukul Complaint Management System check_availability.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-78248
CVE-2026-78248MEDIUM
SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-78247
CVE-2026-78247MEDIUM
SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-78245
CVE-2026-78245MEDIUM
itsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2026-78244
CVE-2026-78244MEDIUM
itsourcecode Real Estate Management System search.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-75014
CVE-2026-75014MEDIUM
SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2017-15964
CVE-2017-15964—
Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.
23RIESGO
abrir ↗
Referência
CVE-2015-1362
CVE-2015-1362—
Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
bwired - 'index.php?newsID' SQL Injection
CVE-2007-3976—webappsphp
SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the new
23RIESGO
abrir ↗
Referência
CVE-2016-0492
CVE-2016-0492—
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12
60RIESGO
abrir ↗
Referência
CVE-2017-17601
CVE-2017-17601—
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-3220
CVE-2026-3220HIGH
Multiple Plugins - Unauthenticated Stored XSS via Minify Library
41RIESGO
abrir ↗
Referência
CVE-2026-108633
CVE-2026-108633MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add
33RIESGO
abrir ↗
Referência
CVE-2026-108624
CVE-2026-108624MEDIUM
JeecgBoot through 3.9.5 Missing Authorization via sysMessage deleteBatch Endpoint
33RIESGO
abrir ↗
Referência
CVE-2014-2023
CVE-2014-2023—
Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpunity.postcard - 'gallery_path' Remote File Inclusion
CVE-2006-4869—webappsphp
PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2026-19053
CVE-2026-19053CRITICAL
ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter
48RIESGO
abrir ↗
Referência
CVE-2017-15975
CVE-2017-15975—
Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability
23RIESGO
abrir ↗
← anteriorpágina 795 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.