Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.258exploits catalogados
36.019CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8811Nuclei 4349Metasploit 3488✓ solo verificadosrecientespopularesriesgo
22.657 exploits
Referência✓ VexDay Proof
Vastal I-Tech Share Zone - 'id' SQL Injection
CVE-2008-4468—webappsphp
SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Yourownbux 4.0 - 'cookie' SQL Injection
CVE-2008-4492—webappsphp
SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component MGM 0.95r2 - Remote File Inclusion
CVE-2006-3980—webappsphp
PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM)
23RIESGO
abrir ↗
Referência
CVE-2026-9442
CVE-2026-9442HIGH
Edimax BR-6478AC POST Request formiNICSiteSurvey buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2017-16781
CVE-2017-16781—
The installer in MyBB before 1.8.13 has XSS.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
YACS CMS 6.6.1 - context[path_to_root] Remote File Inclusion
CVE-2006-4532—webappsphp
PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and ear
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CMS Frogss 0.4 - 'podpis' SQL Injection
CVE-2006-4536—webappsphp
SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute a
23RIESGO
abrir ↗
Referência
CVE-2017-17575
CVE-2017-17575—
FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-12823
CVE-2026-12823MEDIUM
Browserbase Skills Autobrowse Trace Artifact default permission
33RIESGO
abrir ↗
Referência
CVE-2017-20261
CVE-2017-20261HIGH
Joomla! Component Bargain Product VM3 1.0 SQL Injection
41RIESGO
abrir ↗
Referência
CVE-2017-20260
CVE-2017-20260HIGH
Joomla! Component Price Alert 3.0.2 SQL Injection
41RIESGO
abrir ↗
Referência
CVE-2017-20259
CVE-2017-20259HIGH
Joomla OSDownloads 1.7.4 SQL Injection via item view
41RIESGO
abrir ↗
Referência
CVE-2017-20258
CVE-2017-20258HIGH
Joomla! Component RPC Responsive Portfolio 1.6.1 SQL Injection
41RIESGO
abrir ↗
Referência
CVE-2026-8981
CVE-2026-8981LOW
Lazy Blocks < 4.3.0 - Admin+ Stored XSS via Custom Block Frontend HTML
28RIESGO
abrir ↗
Referência
CVE-2016-2386
CVE-2016-2386CRITICALbajo ataque
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi
100RIESGO
abrir ↗
Referência
CVE-2016-2386
CVE-2016-2386CRITICALbajo ataque
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi
100RIESGO
abrir ↗
Referência
CVE-2026-11585
CVE-2026-11585MEDIUM
CodeAstro Student Attendance Management System createClassArms.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2016-2386
CVE-2016-2386CRITICALbajo ataque
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Libera CMS 1.12 - 'cookie' SQL Injection
CVE-2008-4700—webappsphp
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remot
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Top Auction 1.0 - 'viewcat.php' SQL Injection
CVE-2005-3952—webappsphp
SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1
23RIESGO
abrir ↗
Referência
CVE-2026-8777
CVE-2026-8777MEDIUM
Edimax BR-6428NS POST Request formStaDrvSetup command injection
33RIESGO
abrir ↗
Referência
CVE-2026-8776
CVE-2026-8776HIGH
Edimax BR-6428NS POST Request formPPTPSetup buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7315
CVE-2026-7315MEDIUM
eiceblue spire-pdf-mcp-server PDF File server.py get_pdf_path path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-16979
CVE-2026-16979MEDIUM
SmartCrawl < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration
33RIESGO
abrir ↗
Referência✓ VexDay Proof
BosNews 4.0 - 'article' SQL Injection
CVE-2008-4703—webappsphp
SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
My PHP Dating - 'id' SQL Injection
CVE-2008-4705—webappsphp
SQL injection vulnerability in success_story.php in php Online Dating Software MyPHPDating allows remote attackers to ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mole Group Pizza - 'manufacturers_id' SQL Injection
CVE-2008-5046—webappsphp
SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2016-3081
CVE-2016-3081—
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, a
60RIESGO
abrir ↗
Referência✓ VexDay Proof
Mole Group Rental Script - Authentication Bypass
CVE-2008-5047—webappsphp
SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Anti-Keylogger Elite 3.3.0 - 'AKEProtect.sys' Local Privilege Escalation
CVE-2008-5049—localwindows
Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other version
23RIESGO
abrir ↗
← anteriorpágina 681 / 756siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.