Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.233 exploits
Referência
CVE-2026-65708
CVE-2026-65708HIGH
sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController
41RIESGO
abrir ↗
Referência
CVE-2026-65693
CVE-2026-65693HIGH
Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templates
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Riddles Complete Website 1.2.1 - 'riddleid' SQL Injection
CVE-2008-5166—webappsphp
SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência
CVE-2026-66027
CVE-2026-66027HIGH
Suna < 0.9.102 Broken Access Control via Message Queue API
41RIESGO
abrir ↗
Referência
CVE-2026-66006
CVE-2026-66006MEDIUM
lakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs
33RIESGO
abrir ↗
Referência
CVE-2026-66005
CVE-2026-66005MEDIUM
Jan Local API Server CORS Origin Reflection via 0.0.0.0 Binding
33RIESGO
abrir ↗
Referência
CVE-2026-66004
CVE-2026-66004MEDIUM
BlenderMCP Path Traversal via download_polyhaven_asset API
33RIESGO
abrir ↗
Referência
CVE-2026-12688
CVE-2026-12688MEDIUM
ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Tips Complete Website 1.2.0 - 'tipid' SQL Injection
CVE-2008-5168—webappsphp
SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PG Job Site - Blind SQL Injection
CVE-2008-6117—webappsphp
SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB 3 - Mod Tag Board 4 Blind SQL Injection
CVE-2008-6314—webappsphp
SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WEBBDOMAIN Post Card 1.02 - Authentication Bypass
CVE-2008-6623—webappsphp
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WEBBDOMAIN Polls 1.01 - Authentication Bypass
CVE-2008-6625—webappsphp
SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2010-3150
CVE-2010-3150—
Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 (314 (MC: 160820)) allows local users, and possibly r
28RIESGO
abrir ↗
Referência
CVE-2026-9570
CVE-2026-9570HIGH
Taskbuilder < 5.0.8 - Reflected XSS via Shortcode
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech MMORPG Zone - 'game_id' SQL Injection
CVE-2008-4460—webappsphp
SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência
CVE-2010-3151
CVE-2010-3151—
Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers
28RIESGO
abrir ↗
Referência
CVE-2017-15992
CVE-2017-15992—
Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.
23RIESGO
abrir ↗
Referência
CVE-2026-50656
CVE-2026-50656HIGH
Microsoft Defender Elevation of Privilege Vulnerability
46RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech Dating Zone - 'fage' SQL Injection
CVE-2008-4461—webappsphp
SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Web3news 0.95 - 'PHPSECURITYADMIN_PATH' Remote File Inclusion
CVE-2006-4452—webappsphp
PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when regis
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech Visa Zone - 'news_id' SQL Injection
CVE-2008-4462—webappsphp
SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2017-15993
CVE-2017-15993—
Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-16001
CVE-2017-16001—
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently su
23RIESGO
abrir ↗
Referência
CVE-2017-16237
CVE-2017-16237—
In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file (VIAGLT64.SYS) contains an Arbitrary Write vulnerability be
23RIESGO
abrir ↗
Referência
CVE-2017-16244
CVE-2017-16244—
Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka Build 426) due to improper validation of CSRF tokens for po
23RIESGO
abrir ↗
Referência
CVE-2026-7785
CVE-2026-7785MEDIUM
A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7784
CVE-2026-7784MEDIUM
RTGS2017 NagaAgent Skills Endpoint extensions.py path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-7783
CVE-2026-7783MEDIUM
CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7782
CVE-2026-7782MEDIUM
CodeCanyon Perfex CRM Tenant Clients.php project authorization
33RIESGO
abrir ↗
← anteriorpágina 427 / 742siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.