Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.794exploits catalogados
36.057CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
Dovecot IMAP 1.0.10 < 1.1rc2 - Remote Email Disclosure
CVE-2008-1218—remotemultiple
Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Bloo 1.00 - Multiple SQL Injections
CVE-2008-1313—webappsphp
Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
QuickTalk Forum 1.6 - Blind SQL Injection
CVE-2008-1316—webappsphp
SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Aperto Blog 0.1.1 - Local File Inclusion / SQL Injection
CVE-2008-5775—webappsphp
SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CadeNix - SQL Injection
CVE-2008-5777—webappsphp
SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the ci
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EasyCalendar 4.0tr - Multiple Vulnerabilities
CVE-2008-1344—webappsphp
Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EasyGallery 5.0tr - Multiple Vulnerabilities
CVE-2008-1347—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fully Modded phpBB - 'kb.php' SQL Injection
CVE-2008-1350—webappsphp
SQL injection vulnerability in kb.php in Fully Modded phpBB (phpbbfm) 80220 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
iGaming CMS 1.5 - Multiple SQL Injections
CVE-2008-5841—webappsphp
Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module tutorials 2.1b - 'printpage.php' SQL Injection
CVE-2008-1351—webappsphp
SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Alt-N MDaemon IMAP server 9.6.4 - 'FETCH' Remote Buffer Overflow
CVE-2008-1358—remotewindows
Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to
50RIESGO
abrir ↗
Referência✓ VexDay Proof
AuraCMS 2.2.1 - 'X-Forwarded-For' HTTP Header Blind SQL Injection
CVE-2008-1398—webappsphp
SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MG-SOFT Net Inspector 6.5.0.828 - Multiple Vulnerabilities
CVE-2008-1402—remotewindows
MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1) denial of service (except
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eXV2 Module Viso 2.0.4.3 - 'kid' SQL Injection
CVE-2008-1404—webappsphp
SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attacke
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fuzzylime CMS 3.01 - 'admindir' Remote File Inclusion
CVE-2008-1405—webappsphp
PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute a
35RIESGO
abrir ↗
Referência✓ VexDay Proof
acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer
CVE-2008-1410—remotewindows
Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpAuction GPL Enhanced 2.51 - Multiple Remote File Inclusions
CVE-2008-1416—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PH
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Easy-Clanpage 2.2 - 'id' SQL Injection
CVE-2008-1425—webappsphp
SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
KAPhotoservice - 'album.asp' SQL Injection
CVE-2008-1426—webappsasp
SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BIND 9.4.1 < 9.4.2 - Remote DNS Cache Poisoning (Metasploit)
CVE-2008-1447—remotemultiple
The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windo
60RIESGO
abrir ↗
Referência✓ VexDay Proof
BIND 9.x - Remote DNS Cache Poisoning
CVE-2008-1447—remotemultiple
The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windo
60RIESGO
abrir ↗
Referência✓ VexDay Proof
BIND 9.x - Remote DNS Cache Poisoning
CVE-2008-1447—remotemultiple
The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windo
60RIESGO
abrir ↗
Referência✓ VexDay Proof
RunCMS Module section - 'artid' SQL Injection
CVE-2008-1462—webappsphp
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP iCalendar 2.24 - 'cookie_language' Local File Inclusion / Arbitrary File Upload
CVE-2008-5968—webappsphp
Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Home FTP Server 1.4.5 - Remote Denial of Service
CVE-2008-1478—doswindows
Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode conn
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SunOS 5.10 Sun Cluster - 'rpc.metad' Denial of Service (PoC)
CVE-2008-1480—dossolaris
rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC requ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PunBB 1.2.16 - Blind Password Recovery
CVE-2008-1484—webappsphp
The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ASUS DPC Proxy 2.0.0.16/19 - Remote Buffer Overflow
CVE-2008-1491—remotewindows
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 an
60RIESGO
abrir ↗
Referência✓ VexDay Proof
PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload
CVE-2008-1495—webappsphp
Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote auth
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NetWin Surgemail 3.8k4-4 - IMAP (Authenticated) Remote LIST Universal
CVE-2008-1498—remotewindows
Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated user
23RIESGO
abrir ↗
página 1 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.