Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

80.095exploits catalogados
36.945CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.442GitHub PoC 15.312VulnCheck XDB 8970Nuclei 4393Metasploit 3502✓ solo verificadosrecientespopularesriesgo
80.095 exploits
Exploit-DB✓ VexDay Proof
Responsive Events & Movie Ticket Booking Script 3.2.1 - 'findcity.php?q' SQL Injection
CVE-2017-17632—webappsphp11 dic 2017
Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Multireligion Responsive Matrimonial 4.7.2 - 'succid' SQL Injection
CVE-2017-17631—webappsphp11 dic 2017
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Lawyer Search Script 1.1 - 'lawyer-list?city' SQL Injection
CVE-2017-17620—webappsphp11 dic 2017
Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Trademe Clone 1.0 - 'search' / 'id' SQL Injection
CVE-2017-17577—webappsphp09 dic 2017
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Freelancer Clone 1.0 - 'profile.php?u' SQL Injection
CVE-2017-17579—webappsphp09 dic 2017
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Amazon Clone 1.0 - SQL Injection
CVE-2017-17572—webappsphp09 dic 2017
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Foodpanda Clone 1.0 - SQL Injection
CVE-2017-17571—webappsphp09 dic 2017
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Basic B2B Script 2.0.8 - 'product_details.php?id' SQL Injection
CVE-2017-17600—webappsphp09 dic 2017
Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Expedia Clone 1.0 - 'fl_orig' / 'fl_dest' / 'id' SQL Injection
CVE-2017-17570—webappsphp09 dic 2017
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_o
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS IMDB Clone 1.0 - 'f' / 's' / 'id' SQL Injection
CVE-2017-17588—webappsphp09 dic 2017
FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id par
23RIESGO
abrir ↗
Exploit-DB
Affiliate MLM Script 1.0 - 'product-category.php?key' SQL Injection
CVE-2017-17598—webappsphp09 dic 2017
Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Gigs Script 1.0 - 'cat' / 'sc' SQL Injection
CVE-2017-17576—webappsphp09 dic 2017
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or se
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Advance Online Learning Management Script 3.1 - 'subcatid' / 'popcourseid' SQL Injection
CVE-2017-17599—webappsphp09 dic 2017
Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Ebay Clone 1.0 - 'id' / 'sub_category_id' / 'category_id' SQL Injection
CVE-2017-17573—webappsphp09 dic 2017
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id p
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Beauty Parlour Booking Script 1.0 - 'gender' / 'city' SQL Injection
CVE-2017-17595—webappsphp09 dic 2017
Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Advance B2B Script 2.1.3 - 'show_id' / 'pid' SQL Injection
CVE-2017-17602—webappsphp09 dic 2017
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Crowdfunding Script 1.0 - 'latest_news_details.php?id' SQL Injection
CVE-2017-17578—webappsphp09 dic 2017
FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Care Clone 1.0 - 'jobFrequency' / 'jobType' SQL Injection
CVE-2017-17574—webappsphp09 dic 2017
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Groupon Clone 1.0 - 'id' SQL Injection
CVE-2017-17575—webappsphp09 dic 2017
FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Grubhub Clone 1.0 - 'keywords' SQL Injection
CVE-2017-17582—webappsphp09 dic 2017
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Indiamart Clone 1.0 - 'token' / 'id' / 'c' SQL Injection
CVE-2017-17587—webappsphp09 dic 2017
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Linkedin Clone 1.0 - 'grid' / 'fid' / 'id' SQL Injection
CVE-2017-17580—webappsphp09 dic 2017
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.
23RIESGO
abrir ↗
Exploit-DB
Child Care Script 1.0 - 'city' SQL Injection
CVE-2017-17608—webappsphp08 dic 2017
Child Care Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Exploit-DB
Consumer Complaints Clone Script 1.0 - 'id' SQL Injection
CVE-2017-17605—webappsphp08 dic 2017
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
23RIESGO
abrir ↗
GitHub PoC★ 3
RTF Cleaner, tries to extract URL from malicious RTF samples using CVE-2017-0199 & CVE-2017-8759
CVE-2017-0199HIGHbajo ataqueransomware08 dic 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RIESGO
abrir ↗
Exploit-DB
E-commerce MLM Software 1.0 - SQL Injection
CVE-2017-17610—webappsphp08 dic 2017
E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid paramet
23RIESGO
abrir ↗
Exploit-DB
Event Calendar Category Script 1.0 - 'city' SQL Injection
CVE-2017-17616—webappsphp08 dic 2017
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
23RIESGO
abrir ↗
Exploit-DB
Co-work Space Search Script 1.0 - 'city' SQL Injection
CVE-2017-17606—webappsphp08 dic 2017
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Website Auction Marketplace 2.0.5 - 'cat_id' SQL Injection
CVE-2017-17592—webappsphp08 dic 2017
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FS Thumbtack Clone 1.0 - 'cat' / 'sc' SQL Injection
CVE-2017-17589—webappsphp08 dic 2017
FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parame
23RIESGO
abrir ↗
← anteriorpágina 938 / 2670siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.