Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.533exploits catalogados
35.607CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.367 exploits
Referência
CVE-2017-17622
CVE-2017-17622—
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Excel 2000/2003 - Sheet Name (PoC)
CVE-2007-3490—doswindows
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified
35RIESGO
abrir ↗
Referência✓ VexDay Proof
phpEventCalendar 0.2.3 - 'eventdisplay.php' SQL Injection
CVE-2007-3519—webappsphp
SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ArcadeBuilder Game Portal Manager 1.7 - SQL Injection
CVE-2007-3521—webappsphp
SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ripe Website Manager (CMS) 0.8.9 - Remote File Inclusion
CVE-2007-3524—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to e
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Buddy Zone 1.5 - Multiple SQL Injections
CVE-2007-3526—webappsphp
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2007-3530
CVE-2007-3530—
PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain
23RIESGO
abrir ↗
Referência
CVE-2017-17622
CVE-2017-17622—
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-14924
CVE-2026-14924HIGH
Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification
41RIESGO
abrir ↗
Referência
CVE-2026-12394
CVE-2026-12394CRITICAL
MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator
48RIESGO
abrir ↗
Referência
CVE-2026-12255
CVE-2026-12255HIGH
MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration
41RIESGO
abrir ↗
Referência
CVE-2026-10082
CVE-2026-10082MEDIUM
Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' Parameter
33RIESGO
abrir ↗
Referência
CVE-2017-17624
CVE-2017-17624—
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat o
23RIESGO
abrir ↗
Referência
CVE-2017-17625
CVE-2017-17625—
Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17625
CVE-2017-17625—
Professional Service Script 1.0 has SQL Injection via the service-list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17626
CVE-2017-17626—
Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17626
CVE-2017-17626—
Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17628
CVE-2017-17628—
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17628
CVE-2017-17628—
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17630
CVE-2017-17630—
Yoga Class Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17630
CVE-2017-17630—
Yoga Class Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17631
CVE-2017-17631—
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17631
CVE-2017-17631—
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17632
CVE-2017-17632—
Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-58053
CVE-2026-58053CRITICAL
Gitea act_runner - Container Hardening Bypass via Workflow Container Options
48RIESGO
abrir ↗
Referência
CVE-2026-58052
CVE-2026-58052MEDIUM
7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Traffic Stats - 'referralUrl.php?offset' SQL Injection
CVE-2007-3840—webappsphp
SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2019-25761
CVE-2019-25761HIGH
Joomla! Component JoomCRM 1.1.1 SQL Injection via deal_id
41RIESGO
abrir ↗
Referência
CVE-2017-17637
CVE-2017-17637—
Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pictures Rating - 'index.php?msgid' SQL Injection
CVE-2007-3881—webappsphp
SQL injection vulnerability in index.php in Pictures Rating (Picture Rating) allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
← anteriorpágina 495 / 746siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.