Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados

39.383CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

CzarNews 1.20 - 'cookie' SQL Injection

CVE-2008-4203—webappsphp

SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Link Trader - 'lnkid' SQL Injection

CVE-2008-6102—webappsphp

SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Oracle 10g/11g - 'SYS.LT.FINDRICSET' SQL Injection (1)

CVE-2007-5511—localmultiple

SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.

50RIESGO

abrir ↗

Referência✓ VexDay Proof

unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities

CVE-2009-1948—webappsphp

Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals i

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpBP RC3 (2.204) - SQL Injection / Remote Code Execution

CVE-2007-0370—webappsphp

Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to inj

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Oracle 10g/11g - 'SYS.LT.FINDRICSET' SQL Injection (2)

CVE-2007-5511—localmultiple

SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.

50RIESGO

abrir ↗

Referência✓ VexDay Proof

SonicWALL SSL-VPN - 'NeLaunchCtrl' ActiveX Control Remote Command Execution

CVE-2007-5603—remotewindows

Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x

50RIESGO

abrir ↗

Referência✓ VexDay Proof

iyzi Forum 1.0 Beta 3 - SQL Injection

CVE-2006-5054—webappsasp

SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ZZ FlashChat 3.1 - 'help.php' Local File Inclusion

CVE-2007-5620—webappsphp

Directory traversal vulnerability in admin/inc/help.php in ZZ:FlashChat 3.1 and earlier allows remote attackers to inclu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ezcms 1.2 - Blind SQL Injection / Authentication Bypass

CVE-2008-2921—webappsphp

SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Ovidentia 6.6.5 - 'item' SQL Injection

CVE-2008-4423—webappsphp

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Comdev Web Blogger 4.1.3 - 'arcmonth' SQL Injection

CVE-2008-6250—webappsphp

SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Def-Blog 1.0.3 - 'comadd.php' SQL Injection

CVE-2006-5383—webappsphp

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Virtue Classifieds - 'category' SQL Injection

CVE-2009-2021—webappsphp

SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPortal 1 - 'topicler.php?id' SQL Injection

CVE-2009-2098—webappsphp

SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Webdrivers Simple Forum - 'message_details.php' SQL Injection

CVE-2006-5802—webappsphp

SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote attack

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ASPNuke 0.80 - 'register.asp' SQL Injection

CVE-2006-6070—webappsasp

SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Article Friendly Pro/Standard - SQL Injection

CVE-2008-3670—webappsphp

SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Einstein 1.01 - Local Password Disclosure

CVE-2005-0619—localwindows

Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows l

23RIESGO

abrir ↗

Referência✓ VexDay Proof

elvin bts 1.2.0 - Multiple Vulnerabilities

CVE-2009-2129—webappsphp

Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authen

23RIESGO

abrir ↗

Referência✓ VexDay Proof

xweblog 2.1 - 'kategori.asp' SQL Injection

CVE-2006-5023—webappsasp

SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

E-Smart Cart 1.0 - 'Product_ID' SQL Injection

CVE-2007-0092—webappsasp

SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência✓ VexDay Proof

eDocStore - 'doc.php?doc_id' SQL Injection

CVE-2007-3452—webappsphp

SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

CVE-2009-2156—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to in

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MamboWiki 0.9.6 - Remote File Inclusion

CVE-2006-4282—webappsphp

PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com_mambowiki) 0.9.6 and earlier f

23RIESGO

abrir ↗

Referência✓ VexDay Proof

InstaGuide Weather Script 1.0 - 'index.php' Local File Inclusion

CVE-2007-5674—webappsphp

Directory traversal vulnerability in index.php in InstaGuide Weather (aka Weather for PHP) 1.0, when magic_quotes_gpc is

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component jooget 2.6.8 - SQL Injection

CVE-2008-0829—webappsphp

SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

EQdkp 1.3.2f - 'user_id' Authentication Bypass

CVE-2008-2222—webappsphp

SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Link Bid Script 1.5 - Multiple SQL Injections

CVE-2008-4175—webappsphp

Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FlashGet 1.9.0.1012 - 'FTP PWD Response' SEH Stack Overflow

CVE-2008-4321—remotewindows

Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long res

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.