Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.211exploits catalogados
36.421CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 23.022GitHub PoC 15.027VulnCheck XDB 8846Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
Pilot Group PG Roommate Finder Solution - Authentication Bypass
CVE-2008-5307—webappsphp
SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component mDigg 2.2.8 - 'category' SQL Injection
CVE-2008-6149—webappsphp
SQL injection vulnerability in the mDigg (com_mdigg) component 2.2.8 for Joomla! allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpComasy 0.9.1 - 'entry_id' SQL Injection
CVE-2009-1023—webappsphp
SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpIP 4.3.2 - Multiple SQL Injections
CVE-2008-0538—webappsphp
Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FoT Video scripti 1.1b - 'oyun' SQL Injection
CVE-2008-4176—webappsasp
SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre Real Estate Listings - 'search.php' SQL Injection
CVE-2008-4177—webappsphp
SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload
CVE-2008-1496—webappsphp
Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Web Directory Script 2.0 - 'name' SQL Injection
CVE-2008-3787—webappsphp
SQL injection vulnerability in listing_view.php in Web Directory Script 2.0 and earlier allows remote attackers to execu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Downline Goldmine Category Addon - SQL Injection
CVE-2008-4178—webappsphp
SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ClipShare Pro 2006-2007 - 'chid' SQL Injection
CVE-2008-5489—webappsphp
SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component mad4Joomla! - SQL Injection
CVE-2008-6181—webappsphp
SQL injection vulnerability in the Mad4Joomla Mailforms (com_mad4joomla) component before 1.1.8.2 for Joomla! allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Simple Document Management System 1.1.4 - Authentication Bypass
CVE-2008-6220—webappsphp
SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earli
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PsychoStats 2.3.3 - Multiple SQL Injections
CVE-2008-6422—webappsphp
Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VWar 1.50 R14 - 'online.php' SQL Injection
CVE-2006-4142—webappsphp
SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
minimal ablog 0.4 - SQL Injection / Arbitrary File Upload / Authentication Bypass
CVE-2008-6611—webappsphp
SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PozScripts Classified Ads Script - 'cid' SQL Injection
CVE-2008-3673—webappsphp
SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DELTAScripts PHP Classifieds 7.5 - Authentication Bypass
CVE-2008-5806—webappsphp
SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting
CVE-2007-3447—webappsphp
SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Blog System 1.x - 'index.php?news_id' SQL Injection
CVE-2007-3979—webappsphp
SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to execu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TinyWebGallery 1.5 - 'image' Remote File Inclusion
CVE-2006-4166—webappsphp
PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component musepoes - 'aid' SQL Injection
CVE-2008-0579—webappsphp
SQL injection vulnerability in index.php in the buslicense (com_buslicense) component for Joomla! allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Masir Camp E-Shop Module 3.0 - 'ordercode' SQL Injection
CVE-2008-3955—webappsphp
SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Downline Goldmine newdownlinebuilder - SQL Injection
CVE-2008-4178—webappsphp
SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Downline Goldmine paidversion - SQL Injection
CVE-2008-4178—webappsphp
SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Creator CMS 5.0 - 'sideid' SQL Injection
CVE-2008-4377—webappsasp
SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Open Auto Classifieds 1.4.3b - SQL Injection
CVE-2008-6656—webappsphp
Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AJchat 0.10 - 'unse' SQL Injection
CVE-2008-7210—webappsphp
directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AuthPhp 1.0 - Authentication Bypass
CVE-2009-0738—webappsphp
SQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
e-Vision CMS 2.02 - SQL Injection / Remote Code Execution
CVE-2007-3214—webappsphp
SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Myspace Clone Script - SQL Injection
CVE-2007-5992—webappsphp
SQL injection vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) allows remote a
23RIESGO
abrir ↗
← anteriorpágina 116 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.