Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.107exploits catalogados
36.322CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3490✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
PHPKIT 1.6.4pl1 - 'article.php' SQL Injection
SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
ezcms 1.2 - Blind SQL Injection / Authentication Bypass
SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrar
23RIESGO
abrir ↗Referência✓ VexDay Proof
iyzi Forum 1.0 Beta 3 - SQL Injection
SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute
23RIESGO
abrir ↗Referência✓ VexDay Proof
Ovidentia 6.6.5 - 'item' SQL Injection
SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Referência✓ VexDay Proof
iScripts Socialware - 'id' SQL Injection
Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbit
23RIESGO
abrir ↗Referência✓ VexDay Proof
IRSR 0.2 - '_sysSessionPath' Remote File Inclusion
PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and
23RIESGO
abrir ↗Referência✓ VexDay Proof
Microsoft Windows Server - Universal Code Execution (MS08-067)
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RIESGO
abrir ↗Referência✓ VexDay Proof
Microsoft Windows Server 2000/2003 - Code Execution (MS08-067)
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RIESGO
abrir ↗Referência✓ VexDay Proof
ECShop 2.5.0 - 'order_sn' SQL Injection
SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Referência✓ VexDay Proof
WGCC 0.5.6b - 'quiz.php' SQL Injection
SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attack
23RIESGO
abrir ↗Referência✓ VexDay Proof
PHPMyRing 4.2.1 - 'cherche.php' SQL Injection
Multiple SQL injection vulnerabilities in cherche.php in PHPMyRing 4.2.1 and earlier allow remote attackers to execute a
23RIESGO
abrir ↗Referência✓ VexDay Proof
WTcom 0.2.4-alpha - 'torrents.php' SQL Injection
SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute a
23RIESGO
abrir ↗Referência✓ VexDay Proof
NewsLetter MX 1.0.2 - 'ID' SQL Injection
SQL injection vulnerability in admin/admin_mail_adressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers
23RIESGO
abrir ↗Referência✓ VexDay Proof
Article Friendly Pro/Standard - SQL Injection
SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Referência✓ VexDay Proof
Comdev Web Blogger 4.1.3 - 'arcmonth' SQL Injection
SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Referência✓ VexDay Proof
Def-Blog 1.0.3 - 'comadd.php' SQL Injection
SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Referência✓ VexDay Proof
Webdrivers Simple Forum - 'message_details.php' SQL Injection
SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote attack
23RIESGO
abrir ↗Referência✓ VexDay Proof
ASPNuke 0.80 - 'register.asp' SQL Injection
SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers
23RIESGO
abrir ↗Referência✓ VexDay Proof
E-Smart Cart 1.0 - 'Product_ID' SQL Injection
SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Referência✓ VexDay Proof
Einstein 1.01 - Local Password Disclosure
Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows l
23RIESGO
abrir ↗Referência✓ VexDay Proof
xweblog 2.1 - 'kategori.asp' SQL Injection
SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Referência✓ VexDay Proof
eDocStore - 'doc.php?doc_id' SQL Injection
SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Referência✓ VexDay Proof
DigiAffiliate 1.4 - 'id' SQL Injection
SQL injection vulnerability in visu_user.asp in Digiappz DigiAffiliate 1.4 and earlier allows remote attackers to execut
23RIESGO
abrir ↗Referência✓ VexDay Proof
Joomla! Component Car Manager 1.1 - SQL Injection
SQL injection vulnerability in index.php in the Car Manager (com_resman) 1.1 and earlier component for Joomla! allows re
23RIESGO
abrir ↗Referência✓ VexDay Proof
XOOPS Module myAlbum-P 2.0 - 'cid' SQL Injection
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remo
23RIESGO
abrir ↗Referência✓ VexDay Proof
Tutti Nova 1.6 - 'TNLIB_DIR' Remote File Inclusion
PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗Referência✓ VexDay Proof
PHP League 0.82 - 'classement.php' SQL Injection
SQL injection vulnerability in consult/classement.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to
23RIESGO
abrir ↗Referência✓ VexDay Proof
Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection
SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users t
23RIESGO
abrir ↗Referência✓ VexDay Proof
Elkagroup Image Gallery 1.0 - SQL Injection
SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
ArcadeBuilder Game Portal Manager 1.7 - SQL Injection
SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.