Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados

35.420CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.266 exploits

Referência✓ VexDay Proof

Joomla! Component Daily Message 1.0.3 - 'id' SQL Injection

CVE-2008-6076—webappsphp

SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.01.01 - 'getsquad' SQL Injection

CVE-2006-5388—webappsphp

SQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência

CVE-2017-5329

CVE-2017-5329—

Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SFS EZ BIZ PRO - SQL Injection

CVE-2008-6245—webappsphp

SQL injection vulnerability in track.php in Scripts For Sites (SFS) EZ BIZ PRO allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Webring - 'cat' SQL Injection

CVE-2008-6246—webappsphp

SQL injection vulnerability in category.php in Scripts For Sites (SFS) EZ Webring allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Top Sites - SQL Injection

CVE-2008-6247—webappsphp

SQL injection vulnerability in topsite.php in Scripts For Sites (SFS) EZ Top Sites allows remote attackers to execute ar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Galatolo Web Manager 1.3a - Cross-Site Scripting / SQL Injection

CVE-2008-6249—webappsphp

SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers t

23RIESGO

abrir ↗

Referência

CVE-2025-15609

CVE-2025-15609HIGH

Fortis For WooCommerce < 1.3.1 - Sensitive API Key Disclosure

41RIESGO

abrir ↗

Referência✓ VexDay Proof

MDweb 1.3 - 'chemin_appli' Remote File Inclusion

CVE-2006-5587—webappsphp

Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier (Mdweb132-postgres) allow remote attackers t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

smcFanControl 2.1.2 (OSX) - Multiple Buffer Overflow Vulnerabilities (PoC)

CVE-2008-6252—dososx

Stack-based buffer overflow in the smc program in smcFanControl 2.1.2 allows local users to execute arbitrary code and g

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Jadu Galaxies - 'categoryId' Blind SQL Injection

CVE-2008-6254—webappsphp

SQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ArticleBeach Script 2.0 - 'index.php' Remote File Inclusion

CVE-2006-5590—webappsphp

PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Tours Manager 1.0 - SQL Injection

CVE-2008-6289—webappsphp

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL comman

23RIESGO

abrir ↗

Referência

CVE-2026-8208

CVE-2026-8208HIGH

Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the re

41RIESGO

abrir ↗

Referência

CVE-2026-5335

CVE-2026-5335MEDIUM

Magic Export & Import < 1.2.0 - Unauthenticated PII Disclosure

33RIESGO

abrir ↗

Referência

CVE-2026-7733

CVE-2026-7733MEDIUM

funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-7731

CVE-2026-7731MEDIUM

code-projects BloodBank Managing System get_state.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-7714

CVE-2026-7714MEDIUM

crocodilestick Calibre-Web-Automated Admin Endpoint cwa_functions.py missing authentication

33RIESGO

abrir ↗

Referência

CVE-2026-7707

CVE-2026-7707MEDIUM

Open5GS UDR nudr-handler.c udr_nudr_dr_handle_subscription_context denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-7706

CVE-2026-7706MEDIUM

Open5GS AMF gmm-handler.c gmm_handle_service_request denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-7705

CVE-2026-7705MEDIUM

JD Cloud JDCOS Service jdcap set_iptv_info command injection

33RIESGO

abrir ↗

Referência

CVE-2026-7704

CVE-2026-7704MEDIUM

AV Stumpfl Pixera Two Media Server Service Port 1338 path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-7703

CVE-2026-7703MEDIUM

AV Stumpfl Pixera Two Media Server Websocket API code injection

33RIESGO

abrir ↗

Referência

CVE-2026-7702

CVE-2026-7702MEDIUM

toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization

33RIESGO

abrir ↗

Referência

CVE-2026-7699

CVE-2026-7699MEDIUM

Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Acc Statistics 1.1 - Insecure Cookie Handling

CVE-2008-6294—webappsphp

admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by

23RIESGO

abrir ↗

Referência✓ VexDay Proof

GestArt Beta 1 - 'aide.php?aide' Remote File Inclusion

CVE-2006-5612—webappsphp

PHP remote file inclusion vulnerability in aide.php3 (aka aide.php) in GestArt beta 1, when register_globals is enabled,

23RIESGO

abrir ↗

Referência

CVE-2010-4995

CVE-2010-4995—

SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpBB Mod Small ShoutBox 1.4 - Remote Edit/Delete Messages

CVE-2008-6301—webappsphp

SQL injection vulnerability in shoutbox_view.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ToursManager - 'tourview.php' Blind SQL Injection

CVE-2008-6303—webappsphp

SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.