Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.233 exploits
Referência
CVE-2017-17603
CVE-2017-17603—
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_
23RIESGO
abrir ↗
Referência
CVE-2017-17603
CVE-2017-17603—
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_
23RIESGO
abrir ↗
Referência
CVE-2017-17604
CVE-2017-17604—
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17604
CVE-2017-17604—
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17605
CVE-2017-17605—
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17605
CVE-2017-17605—
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17606
CVE-2017-17606—
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17606
CVE-2017-17606—
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17608
CVE-2017-17608—
Child Care Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17608
CVE-2017-17608—
Child Care Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17620
CVE-2017-17620—
Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Fusion Mod freshlinks - 'linkid' SQL Injection
CVE-2008-5074—webappsphp
SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2017-17620
CVE-2017-17620—
Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
E-Uploader Pro 1.0 - Multiple SQL Injections
CVE-2008-5075—webappsphp
Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPKB 1.5 Professional - Multiple SQL Injections
CVE-2008-5088—webappsphp
Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execu
23RIESGO
abrir ↗
Referência
CVE-2017-17621
CVE-2017-17621—
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
23RIESGO
abrir ↗
Referência
CVE-2017-17621
CVE-2017-17621—
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Deterministic Network Enhancer - 'dne2000.sys' Kernel Ring0 SYSTEM
CVE-2008-5121—localwindows
dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Cli
23RIESGO
abrir ↗
Referência
CVE-2017-17621
CVE-2017-17621—
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
23RIESGO
abrir ↗
Referência
CVE-2026-8293
CVE-2026-8293HIGH
Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP Skip
41RIESGO
abrir ↗
Referência
CVE-2026-10583
CVE-2026-10583MEDIUM
nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-10568
CVE-2026-10568MEDIUM
itsourcecode Fees Management System manage_payment.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
MyServer 0.8.11 - '204 No Content' error Remote Denial of Service
CVE-2008-5160—doswindows
Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via mul
23RIESGO
abrir ↗
Referência
CVE-2017-17622
CVE-2017-17622—
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Xe webtv - 'id' Blind SQL Injection
CVE-2008-5200—webappsphp
SQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2017-17622
CVE-2017-17622—
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-10690
CVE-2026-10690MEDIUM
wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2017-17622
CVE-2017-17622—
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
23RIESGO
abrir ↗
Referência
CVE-2010-3467
CVE-2010-3467—
SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial modul
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Merlix Teamworx Server - File Disclosure/Bypass
CVE-2008-5600—webappsphp
Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows re
23RIESGO
abrir ↗
← anteriorpágina 423 / 742siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.