Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados

39.383CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

PHP Real Estate Classifieds - Remote File Inclusion

CVE-2007-3160—webappsphp

PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote at

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Openfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-6509—webappsjsp

SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Web Hosting Directory - Multiple Vulnerabilities

CVE-2008-6940—webappsphp

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, whi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection

CVE-2008-6182—webappsphp

SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows r

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Peel Shopping 3.1 - 'rubid' SQL Injection

CVE-2008-6892—webappsphp

SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

RunCMS Newbb_plus 0.92 - Client IP SQL Injection

CVE-2008-0224—webappsphp

SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

VidShare Pro - Arbitrary File Upload

CVE-2009-1750—webappsphp

Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users to execute arbitrary code by upl

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component joovideo 1.2.2 - 'id' SQL Injection

CVE-2008-1460—webappsphp

SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Classifieds Script 05122008 - SQL Injection

CVE-2008-2453—webappsphp

Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FizzMedia 1.51.2 - SQL Injection

CVE-2008-3378—webappsphp

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ScozNews 1.2.1 - 'mainpath' Remote File Inclusion

CVE-2006-2487—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbit

23RIESGO

abrir ↗

Referência✓ VexDay Proof

NICE FAQ Script - Authentication Bypass

CVE-2008-6525—webappsphp

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

StrawBerry 1.1.1 - Local File Inclusion / Remote Command Execution

CVE-2009-1774—webappsphp

Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and exe

28RIESGO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche News 1.x - 'CAT_ID' SQL Injection

CVE-2007-1021—webappsasp

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mapbender 2.4.4 - 'mapFiler.php' Remote Code Execution

CVE-2008-0300—webappsphp

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpShop 0.8.1 - SQL Injection / Filter Bypass

CVE-2008-0681—webappsphp

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection

CVE-2008-2084—webappsphp

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to exec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPHoo3 < 5.2.6 - 'viewCat' SQL Injection

CVE-2008-3245—webappsphp

SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP infoboard 7 plus - Multiple Vulnerabilities

CVE-2008-4332—webappsphp

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ParsBlogger - 'blog.asp' SQL Injection

CVE-2008-5637—webappsphp

SQL injection vulnerability in blog.asp in ParsBlogger (Pb) allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FaScript FaUpload - SQL Injection

CVE-2008-5766—webappsphp

SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpcrs 2.06 - 'importFunction' Local File Inclusion

CVE-2008-6074—webappsphp

Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magic_quotes_gpc is disabled, allows rem

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Yet Another NOCC 0.1.0 - Local File Inclusion

CVE-2009-0515—webappsphp

Directory traversal vulnerability in check_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP recommend 1.3 - Authentication Bypass / Remote File Inclusion / Code Injection

CVE-2009-1780—webappsphp

admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, wh

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module XFsection 1.07 - 'articleId' Blind SQL Injection

CVE-2007-1974—webappsphp

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Barracuda Spam Firewall 3.5.11.020 Model 600 - SQL Injection

CVE-2008-1094—remotehardware

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 all

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Angelo-Emlak 1.0 - Multiple SQL Injections

CVE-2008-2048—webappsasp

Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject

23RIESGO

abrir ↗

Referência✓ VexDay Proof

W1L3D4 philboard 1.2 - Blind SQL Injection / Cross-Site Scripting

CVE-2008-5193—webappsphp

Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to injec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP::HTML 0.6.4 - 'PHPhtml.php' Remote File Inclusion

CVE-2007-3230—webappsphp

PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute

35RIESGO

abrir ↗

Referência✓ VexDay Proof

kubix 0.7 - Multiple Vulnerabilities

CVE-2006-7117—webappsphp

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.