Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.108exploits catalogados

36.322CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3491✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

File Upload Manager 1.0.6 - 'detail.asp' SQL Injection

CVE-2006-6813—webappsasp

SQL injection vulnerability in detail.asp in Mxmania File Upload Manager (FUM) 1.0.6 and earlier allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XBrite Members 1.1 - 'id' SQL Injection

CVE-2006-1694—webappsphp

SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Dynamic photo Gallery 1.02 - 'albumID' SQL Injection

CVE-2008-1162—webappsphp

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XMB 1.9.6 Final - 'basename()' Remote Command Execution

CVE-2006-4191—webappsphp

Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

e-Vision CMS 2.02 - SQL Injection / Remote Code Execution

CVE-2007-3214—webappsphp

SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows rem

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Myspace Clone Script - SQL Injection

CVE-2007-5992—webappsphp

SQL injection vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) allows remote a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

icblogger 2.0 - 'YID' SQL Injection

CVE-2006-4597—webappsasp

SQL injection vulnerability in devam.asp in ICBlogger 2.0 and earlier allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ProActive CMS - 'template' Local File Inclusion

CVE-2008-4187—webappsphp

Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a ..

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities

CVE-2006-5772—webappsphp

Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote attackers to execute a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component RD-Autos 1.5.5 - SQL Injection

CVE-2009-0420—webappsphp

SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPMesFilms 1.0 - 'index.php?id' SQL Injection

CVE-2009-0598—webappsphp

SQL injection vulnerability in index.php in PhpMesFilms 1.0 and 1.8 allows remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência✓ VexDay Proof

vidshare pro - SQL Injection / Cross-Site Scripting

CVE-2009-1734—webappsphp

SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component D4JeZine 2.8 - Blind SQL Injection

CVE-2007-1776—webappsphp

SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine (com_ezine) 2.8 and earlier component for

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpDirectorySource 1.1 - Multiple SQL Injections

CVE-2008-2177—webappsphp

Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote att

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SazCart 1.5.1 - 'prodid' SQL Injection

CVE-2008-2411—webappsphp

SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Article Friendly Pro/Standard - SQL Injection

CVE-2008-3649—webappsphp

SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (PoC)

CVE-2008-4193—doswindows

Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t

60RIESGO

abrir ↗

Referência✓ VexDay Proof

CzarNews 1.20 - 'cookie' SQL Injection

CVE-2008-4203—webappsphp

SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Pardal CMS 0.2.0 - Blind SQL Injection

CVE-2009-0279—webappsphp

SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Director 0.21 - Remote Command Execution

CVE-2009-0604—webappsphp

SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

EZ-Blog Beta2 - 'category' SQL Injection

CVE-2009-1626—webappsphp

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled,

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_gsticketsystem - 'catid' Blind SQL Injection

CVE-2009-1736—webappsphp

SQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component for Joomla! allows remo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BP Blog 7.0 - 'layout' SQL Injection

CVE-2007-1445—webappsasp

SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Prozilla Hosting Index - 'cat_id' SQL Injection

CVE-2008-2083—webappsphp

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation

CVE-2008-4190—locallinux

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mic_blog 0.0.3 - SQL Injection / Privilege Escalation

CVE-2008-6805—webappsphp

Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Relative Real Estate Systems 3.0 - 'listing_id' SQL Injection

CVE-2008-3185—webappsphp

SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to exec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection

CVE-2006-4210—webappsphp

nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to us

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_akogallery' 2.5b - SQL Injection

CVE-2008-0561—webappsphp

SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta component for Mambo an

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module PostSchedule 1.0 - 'eid' SQL Injection

CVE-2008-2012—webappsphp

SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.