Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.794exploits catalogados
36.057CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
22.721 exploits
Referência
CVE-2026-12971
CVE-2026-12971LOW
LearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature
28RIESGO
abrir ↗
Referência
CVE-2018-14059
CVE-2018-14059—
Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MySQL Commander 2.7 - 'home' Remote File Inclusion
CVE-2007-1439—webappsphp
PHP remote file inclusion vulnerability in ressourcen/dbopen.php in bitesser MySQL Commander 2.7 and earlier, when regis
23RIESGO
abrir ↗
Referência✓ VexDay Proof
JGBBS 3.0beta1 - 'search.asp?author' SQL Injection
CVE-2007-1440—webappsasp
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2017-17571
CVE-2017-17571—
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17572
CVE-2017-17572—
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
23RIESGO
abrir ↗
Referência
CVE-2017-7293
CVE-2017-7293—
The Dolby DAX2 and DAX3 API services are vulnerable to a privilege escalation vulnerability that allows a normal user to
23RIESGO
abrir ↗
Referência
CVE-2017-7310
CVE-2017-7310—
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9
50RIESGO
abrir ↗
Referência
CVE-2017-17573
CVE-2017-17573—
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id p
23RIESGO
abrir ↗
Referência
CVE-2017-17573
CVE-2017-17573—
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id p
23RIESGO
abrir ↗
Referência
CVE-2017-17574
CVE-2017-17574—
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17574
CVE-2017-17574—
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-19192
CVE-2026-19192HIGH
DeepCool DisplayService DeepCoolDisplayService.exe access control
41RIESGO
abrir ↗
Referência
CVE-2017-17575
CVE-2017-17575—
FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17576
CVE-2017-17576—
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or se
23RIESGO
abrir ↗
Referência
CVE-2017-17576
CVE-2017-17576—
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or se
23RIESGO
abrir ↗
Referência
CVE-2017-17577
CVE-2017-17577—
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param
23RIESGO
abrir ↗
Referência
CVE-2017-17577
CVE-2017-17577—
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param
23RIESGO
abrir ↗
Referência
CVE-2017-17578
CVE-2017-17578—
FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17578
CVE-2017-17578—
FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
23RIESGO
abrir ↗
Referência
CVE-2026-18897
CVE-2026-18897HIGH
UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflow
41RIESGO
abrir ↗
Referência✓ VexDay Proof
TinyIdentD 2.2 - Remote Buffer Overflow
CVE-2007-2711—remotewindows
Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long s
50RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke Module splattforum 4.0 RC1 - Local File Inclusion
CVE-2007-1633—webappsphp
Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allo
23RIESGO
abrir ↗
Referência
CVE-2017-17594
CVE-2017-17594—
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17594
CVE-2017-17594—
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17595
CVE-2017-17595—
Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17596
CVE-2017-17596—
Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17596
CVE-2017-17596—
Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17598
CVE-2017-17598—
Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.
23RIESGO
abrir ↗
Referência
CVE-2017-17601
CVE-2017-17601—
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.
23RIESGO
abrir ↗
← anteriorpágina 723 / 758siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.