Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
26.494 exploits
Referência
CVE-2026-38638
CVE-2026-38638HIGH
An issue in the with_argv function (/unistd/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Servic
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Web3news 0.95 - 'PHPSECURITYADMIN_PATH' Remote File Inclusion
CVE-2006-4452—webappsphp
PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when regis
23RIESGO
abrir ↗
Referência
CVE-2026-38636
CVE-2026-38636HIGH
An issue in the seekdir() function (/dirent/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Servic
41RIESGO
abrir ↗
Referência
CVE-2026-81836
CVE-2026-81836MEDIUM
RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission
33RIESGO
abrir ↗
Referência
CVE-2017-17608
CVE-2017-17608—
Child Care Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Interact 2.2 - 'CONFIG[base_path]' Remote File Inclusion
CVE-2006-4448—webappsphp
Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when register_globals is enabled, allow remote attac
23RIESGO
abrir ↗
Referência
CVE-2017-17613
CVE-2017-17613—
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php cati
23RIESGO
abrir ↗
Referência
CVE-2017-17614
CVE-2017-17614—
Food Order Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17616
CVE-2017-17616—
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
InoutMailingListManager 3.1 - Remote Command Execution
CVE-2007-2004—webappsphp
Multiple SQL injection vulnerabilities in InoutMailingListManager 3.1 and earlier allow remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component com_yanc 1.4 Beta - 'id' SQL Injection
CVE-2007-2792—webappsphp
SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 f
23RIESGO
abrir ↗
Referência
CVE-2022-36633
CVE-2022-36633—
Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ss
35RIESGO
abrir ↗
Referência
CVE-2022-36633
CVE-2022-36633—
Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ss
35RIESGO
abrir ↗
Referência
CVE-2026-79911
CVE-2026-79911CRITICAL
TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow
48RIESGO
abrir ↗
Referência
CVE-2026-79792
CVE-2026-79792MEDIUM
zackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-78112
CVE-2026-78112MEDIUM
itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-78140
CVE-2026-78140MEDIUM
Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Vizayn Urun Tanitim Sistemi 0.2 - 'tr' SQL Injection
CVE-2007-2803—webappsasp
SQL injection vulnerability in default.asp in Vizayn Urun Tanitim Sitesi 0.2 allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência
CVE-2017-17598
CVE-2017-17598—
Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPECard 2.1.4 - 'functions.php' Remote File Inclusion
CVE-2006-4456—webappsphp
PHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows remote attackers to execut
23RIESGO
abrir ↗
Referência
CVE-2017-8594
CVE-2017-8594—
Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute
35RIESGO
abrir ↗
Referência
CVE-2017-17639
CVE-2017-17639—
Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17759
CVE-2017-17759—
Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of
28RIESGO
abrir ↗
Referência
CVE-2018-12254
CVE-2018-12254—
router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to
23RIESGO
abrir ↗
Referência
CVE-2026-75986
CVE-2026-75986MEDIUM
code-projects Online Job Portal System Password Recovery ForPass.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2018-12653
CVE-2018-12653—
A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious Jav
23RIESGO
abrir ↗
Referência
CVE-2026-75979
CVE-2026-75979MEDIUM
xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template engine
33RIESGO
abrir ↗
Referência
CVE-2026-16127
CVE-2026-16127MEDIUM
zevorn rt-claw http_request tool_net.c claw_net_post server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-101188
CVE-2026-101188MEDIUM
Netcore POWER13 ubus routerd.passwd_set password recovery
33RIESGO
abrir ↗
Referência
CVE-2026-16492
CVE-2026-16492MEDIUM
umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection
33RIESGO
abrir ↗
← anteriorpágina 809 / 884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.