Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.794exploits catalogados

36.057CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientes populares riesgo

22.721 exploits

Referência✓ VexDay Proof

Internet Download Accelerator 5.2 - Remote Buffer Overflow (PoC)

CVE-2007-3162—doswindows

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Ac

23RIESGO

abrir ↗

Referência

CVE-2026-12188

CVE-2026-12188MEDIUM

Grit42 Grit GritEntityController grit_entity_controller.rb sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-11516

CVE-2026-11516MEDIUM

UTT HiPER 2610G formNatStaticMap strcpy buffer overflow

33RIESGO

abrir ↗

Referência

CVE-2026-11510

CVE-2026-11510MEDIUM

CodeAstro Leave Management System add_leave.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2021-47984

CVE-2021-47984MEDIUM

WordPress Plugin WP24 Domain Check 1.6.2 Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2026-11477

CVE-2026-11477MEDIUM

hs-web hsweb-framework OAuth2 Client OAuth2Client.java OAuth2Client redirect

33RIESGO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component - Unsafe Method

CVE-2007-3168—remotewindows

A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions befo

23RIESGO

abrir ↗

Referência

CVE-2026-15510

CVE-2026-15510MEDIUM

Leantime API saveSetting improper authorization

33RIESGO

abrir ↗

Referência

CVE-2026-14746

CVE-2026-14746MEDIUM

code-projects Real State Services addprojectrent.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14745

CVE-2026-14745MEDIUM

code-projects Real State Services single-list_rent.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-14738

CVE-2026-14738MEDIUM

exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hash

33RIESGO

abrir ↗

Referência

CVE-2026-14737

CVE-2026-14737MEDIUM

Hanwang e-Face General Management Platform querySysAuthStr.do sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-15387

CVE-2026-15387MEDIUM

Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab

33RIESGO

abrir ↗

Referência

CVE-2026-18252

CVE-2026-18252HIGH

Inclusion of Functionality from Untrusted Control Sphere in GitLab

41RIESGO

abrir ↗

Referência

CVE-2026-9348

CVE-2026-9348HIGH

Edimax EW-7438RPn webs mp stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2018-0974

CVE-2018-0974—

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

23RIESGO

abrir ↗

Referência

CVE-2017-17641

CVE-2017-17641—

Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-17642

CVE-2017-17642—

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.

23RIESGO

abrir ↗

Referência

CVE-2018-1002002

CVE-2018-1002002—

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RIESGO

abrir ↗

Referência

CVE-2017-17642

CVE-2017-17642—

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.

23RIESGO

abrir ↗

Referência

CVE-2017-17643

CVE-2017-17643—

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.

23RIESGO

abrir ↗

Referência

CVE-2017-17643

CVE-2017-17643—

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.

23RIESGO

abrir ↗

Referência

CVE-2017-17645

CVE-2017-17645—

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.

23RIESGO

abrir ↗

Referência

CVE-2017-17645

CVE-2017-17645—

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.

23RIESGO

abrir ↗

Referência

CVE-2026-79622

CVE-2026-79622MEDIUM

dekdee adobe-xd-mcp file-access-from-request Endpoint xd-parser.ts path traversal

33RIESGO

abrir ↗

Referência

CVE-2026-57863

CVE-2026-57863HIGH

Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint

41RIESGO

abrir ↗

Referência

CVE-2026-78435

CVE-2026-78435MEDIUM

Faveo Helpdesk Logo SettingsController.php unlink path traversal

33RIESGO

abrir ↗

Referência✓ VexDay Proof

paBugs 2.0 Beta 3 - 'main.php?cid' SQL Injection

CVE-2007-4183—webappsphp

SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência

CVE-2016-4372

CVE-2016-4372—

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01,

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Remote Mouse GUI 3.008 - Local Privilege Escalation

CVE-2021-35448—localwindows

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.