Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.266 exploits
Referência
CVE-2026-5563
CVE-2026-5563MEDIUM
AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5562
CVE-2026-5562MEDIUM
provectus kafka-ui Endpoint testexecutions validateAccess code injection
33RIESGO
abrir ↗
Referência
CVE-2026-5561
CVE-2026-5561MEDIUM
Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection
33RIESGO
abrir ↗
Referência
CVE-2026-5560
CVE-2026-5560MEDIUM
PHPGurukul Online Shopping Portal Project Parameter payment-method.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2010-5009
CVE-2010-5009—
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2010-5010
CVE-2010-5010—
Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2010-5011
CVE-2010-5011—
SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2010-5011
CVE-2010-5011—
SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2010-5012
CVE-2010-5012—
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2010-5012
CVE-2010-5012—
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2018-25381
CVE-2018-25381HIGH
Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters
41RIESGO
abrir ↗
Referência
CVE-2010-5013
CVE-2010-5013—
SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows rem
23RIESGO
abrir ↗
Referência
CVE-2010-5013
CVE-2010-5013—
SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows rem
23RIESGO
abrir ↗
Referência
CVE-2010-5014
CVE-2010-5014—
SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2010-5015
CVE-2010-5015—
SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2010-5019
CVE-2010-5019—
SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2010-5021
CVE-2010-5021—
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2010-5021
CVE-2010-5021—
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2010-5022
CVE-2010-5022—
SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote at
23RIESGO
abrir ↗
Referência
CVE-2010-5023
CVE-2010-5023—
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2010-5023
CVE-2010-5023—
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2018-1122
CVE-2018-1122HIGH
procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset
41RIESGO
abrir ↗
Referência
CVE-2026-14695
CVE-2026-14695MEDIUM
SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14694
CVE-2026-14694MEDIUM
SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-14693
CVE-2026-14693MEDIUM
SourceCodester Multi-Vendor Online Grocery Management System Master.php cancel_order improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-9302
CVE-2026-9302MEDIUM
546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection
33RIESGO
abrir ↗
Referência
CVE-2026-9301
CVE-2026-9301MEDIUM
omec-project amf NGReset Message memory corruption
33RIESGO
abrir ↗
Referência
CVE-2026-9300
CVE-2026-9300MEDIUM
omec-project amf NGSetupRequest memory corruption
33RIESGO
abrir ↗
Referência
CVE-2010-5024
CVE-2010-5024—
SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, wi
23RIESGO
abrir ↗
Referência
CVE-2010-5026
CVE-2010-5026—
SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e
23RIESGO
abrir ↗
← anteriorpágina 439 / 743siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.