Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados

39.383CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

XOOPS module Articles 1.02 - 'print.php?id' SQL Injection

CVE-2007-3311—webappsphp

SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpFullAnnu (PFA) 6.0 - SQL Injection

CVE-2007-5068—webappsphp

SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência✓ VexDay Proof

JobSite Professional 2.0 - 'file.php' SQL Injection

CVE-2007-5785—webappsphp

SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Content Injector 1.53 - 'index.php' SQL Injection

CVE-2007-6394—webappsphp

SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ZEELYRICS 2.0 - 'bannerclick.php' SQL Injection

CVE-2008-4717—webappsphp

SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

DigiLeave 1.2 - 'book_id' Blind SQL Injection

CVE-2008-3309—webappsasp

SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component live chat - SQL Injection / Open Proxy

CVE-2008-6881—webappsphp

Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

LocazoList 2.01a beta5 - 'subcatID' SQL Injection

CVE-2007-0129—webappsasp

SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module debaser 0.92 - 'genre.php' Blind SQL Injection

CVE-2007-1805—webappsphp

SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to exe

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Phil-a-Form 1.2.0.0 - SQL Injection

CVE-2007-2933—webappsphp

SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! al

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PNPHPBB2 < 1.2i - 'viewforum.php' SQL Injection

CVE-2007-3584—webappsphp

SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Remository - 'cat' SQL Injection

CVE-2007-4505—webappsphp

SQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

JBC Explorer 7.20 RC 1 - Remote Code Execution

CVE-2007-5914—webappsphp

Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allows

23RIESGO

abrir ↗

Referência✓ VexDay Proof

WebPortal CMS 0.7.4 - 'download.php' SQL Injection

CVE-2008-4345—webappsphp

SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Injader CMS 2.1.1 - 'id' SQL Injection

CVE-2008-5890—webappsphp

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL comman

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Adobe Shockwave - 'ShockwaveVersion()' Stack Overflow (PoC)

CVE-2007-5941—doswindows

Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a den

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection

CVE-2009-1032—webappsphp

SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

X.Org xorg-server 1.1.1-48.13 - Probe for Files (PoC)

CVE-2007-5958—dosmultiple

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

jPORTAL 2.3.1 - 'articles.php' SQL Injection

CVE-2007-5973—webappsphp

SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.0 - SQL Injection / Cross-Site Scripting

CVE-2008-6328—webappsphp

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Linkarity - 'link.php' SQL Injection

CVE-2008-4353—webappsphp

SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

jPORTAL 2 - 'mailer.php' SQL Injection

CVE-2007-5974—webappsphp

SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Softbiz Banner Exchange Network Script 1.0 - SQL Injection

CVE-2007-5997—webappsphp

SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authentica

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Carousel Flash Image Gallery - Remote File Inclusion

CVE-2007-6027—webappsphp

PHP remote file inclusion vulnerability in admin.jjgallery.php in the Carousel Flash Image Gallery (com_jjgallery) compo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SHOP-INET 4 - 'grid' SQL Injection

CVE-2009-0292—webappsphp

SQL injection vulnerability in show_cat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component juser 1.0.14 - Remote File Inclusion

CVE-2007-6038—webappsphp

PHP remote file inclusion vulnerability in xajax_functions.php in the JUser (com_juser) 1.0.14 component for Joomla! all

28RIESGO

abrir ↗

Referência✓ VexDay Proof

bcoos 1.0.10 - Local File Inclusion / SQL Injection

CVE-2007-6080—webappsphp

SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

myEvent 1.6 - 'eventdate' SQL Injection

CVE-2008-4650—webappsphp

SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component mambads 1.0 RC1 Beta - SQL Injection

CVE-2008-5226—webappsphp

SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote atta

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Ocean12 Membership Manager Pro - Authentication Bypass

CVE-2008-6390—webappsphp

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.