Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.201exploits catalogados
36.413CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 23.022GitHub PoC 15.017VulnCheck XDB 8846Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
CMS WebBlizzard - 'index.php' Blind SQL Injection
CVE-2008-3154—webappsphp
SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
pLink 2.07 - 'linkto.php' Blind SQL Injection
CVE-2008-4357—webappsphp
SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DESlock+ 3.2.7 - 'vdlptokn.sys' Local Denial of Service
CVE-2008-4362—doswindows
The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (syst
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DESlock+ < 3.2.7 - 'probe read' Local Kernel Denial of Service (PoC)
CVE-2008-4363—doswindows
DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
YourFreeWorld Autoresponder Hosting - 'tr.php' SQL Injection
CVE-2008-4882—webappsphp
SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebCal - 'webCal3_detail.asp?event_id' SQL Injection
CVE-2009-1945—webappsphp
SQL injection vulnerability in webCal3_detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Open Biller 0.1 - 'Username' Blind SQL Injection
CVE-2009-2036—webappsphp
SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
E-topbiz ViralDX 2.07 - 'bannerid' SQL Injection
CVE-2008-2867—webappsphp
SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fastpublish CMS 1.9999 - Local File Inclusion / SQL Injection
CVE-2008-4518—webappsphp
Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Fusion Mod recept - 'kat_id' SQL Injection
CVE-2008-4527—webappsphp
SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Riddles Complete Website 1.2.1 - 'riddleid' SQL Injection
CVE-2008-5166—webappsphp
SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Tips Complete Website 1.2.0 - 'tipid' SQL Injection
CVE-2008-5168—webappsphp
SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PG Job Site - Blind SQL Injection
CVE-2008-6117—webappsphp
SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB 3 - Mod Tag Board 4 Blind SQL Injection
CVE-2008-6314—webappsphp
SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WEBBDOMAIN Post Card 1.02 - Authentication Bypass
CVE-2008-6623—webappsphp
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WEBBDOMAIN Polls 1.01 - Authentication Bypass
CVE-2008-6625—webappsphp
SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AvailScript Photo Album - 'pics.php' Multiple Vulnerabilities
CVE-2008-4369—webappsphp
SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AvailScript Article Script - 'articles.php' Multiple Vulnerabilities
CVE-2008-4371—webappsphp
SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component cropimage 1.0 - Remote File Inclusion
CVE-2006-4363—webappsphp
PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mambo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AvailScript Jobs Portal Script - 'jid' SQL Injection
CVE-2008-4373—webappsphp
SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AvailScript Classmate Script - 'viewprofile.php' SQL Injection
CVE-2008-4375—webappsphp
SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MDaemon POP3 Server < 9.06 - 'USER' Remote Buffer Overflow (PoC)
CVE-2006-4364—doswindows
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attacker
35RIESGO
abrir ↗
Referência✓ VexDay Proof
VistaBB 2.x - 'functions_mod_user.php' Remote File Inclusion
CVE-2006-4365—webappsphp
Multiple PHP remote file inclusion vulnerabilities in VistaBB 2.0.33 and earlier allow remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech MMORPG Zone - 'game_id' SQL Injection
CVE-2008-4460—webappsphp
SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech Dating Zone - 'fage' SQL Injection
CVE-2008-4461—webappsphp
SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Web3news 0.95 - 'PHPSECURITYADMIN_PATH' Remote File Inclusion
CVE-2006-4452—webappsphp
PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when regis
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech Visa Zone - 'news_id' SQL Injection
CVE-2008-4462—webappsphp
SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
YACS CMS 6.6.1 - context[path_to_root] Remote File Inclusion
CVE-2006-4532—webappsphp
PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and ear
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech Share Zone - 'id' SQL Injection
CVE-2008-4468—webappsphp
SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CMS Frogss 0.4 - 'podpis' SQL Injection
CVE-2006-4536—webappsphp
SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute a
23RIESGO
abrir ↗
← anteriorpágina 112 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.