Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.229exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.030VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
OpenInvoice 0.9 - Arbitrary Change User Password
CVE-2008-6524—webappsphp
resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Dagger CMS 2008 - 'dir_inc' Remote File Inclusion
CVE-2008-6635—webappsphp
PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wpQuiz 2.7 - Multiple SQL Injections
CVE-2007-6172—webappsphp
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component gigCalendar 1.0 - SQL Injection
CVE-2009-0726—webappsphp
SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
123tkShop 0.9.1 - Remote Authentication Bypass
CVE-2007-6458—webappsphp
SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NetHoteles 3.0 - 'ficha.php' SQL Injection
CVE-2009-1346—webappsphp
SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OLIB 7 WebView 2.5.1.1 - 'infile' Local File Inclusion
CVE-2008-5678—webappsphp
Fretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive informati
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP121 Instant Messenger 1.4 - Remote Code Execution
CVE-2006-1828—webappsphp
SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ktools Photostore 3.5.2 - Multiple SQL Injections
CVE-2008-6649—webappsphp
SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versio
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpCommunityCalendar 4.0.3 - Cross-Site Scripting / SQL Injection
CVE-2006-2797—webappsphp
Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
webEdition 6.0.0.4 - 'WE_LANGUAGE' Local File Inclusion
CVE-2009-1222—webappsphp
Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when register_globals is enabled and m
23RIESGO
abrir ↗
Referência✓ VexDay Proof
QuickCart 2.0 - 'categories.php' Local File Inclusion
CVE-2006-6390—webappsphp
Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic
23RIESGO
abrir ↗
Referência✓ VexDay Proof
unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities
CVE-2009-1948—webappsphp
Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Insert User Mod 0.1.2 - Remote File Inclusion
CVE-2006-7100—webappsphp
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0.1.2 and earlier allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Crea-Book 1.0 - Admin Access Bypass / Database Disclosure / Code Execution
CVE-2007-2001—webappsphp
Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
W1L3D4 philboard 0.2 - 'W1L3D4_bolum.asp' SQL Injection
CVE-2007-2641—webappsasp
SQL injection vulnerability in W1L3D4_bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IntelliTamper 2.07/2.08 Beta 4 - A HREF Remote Buffer Overflow
CVE-2008-3360—remotewindows
Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code
23RIESGO
abrir ↗
Referência✓ VexDay Proof
webSPELL 4.2.0c - Bypass BBCode Cross-Site Scripting Cookie Stealing
CVE-2009-1408—webappsphp
Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HT
23RIESGO
abrir ↗
Referência✓ VexDay Proof
bwired - 'index.php?newsID' SQL Injection
CVE-2007-3978—webappsphp
Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID paramet
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ATutor 1.6.1-pl1 - 'import.php' Remote File Inclusion
CVE-2008-3368—webappsphp
PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
KISGB 5.1.1 - 'Authenticate.php' Remote File Inclusion
CVE-2006-6764—webappsphp
PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP thr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Openfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting
CVE-2008-6509—webappsjsp
SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
makit Newsposter Script 3.0 - SQL Injection
CVE-2007-0600—webappsasp
SQL injection vulnerability in news_page.asp in Martyn Kilbryde Newsposter Script (aka makit news/blog poster) 3 and ear
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Apartment Search Script - 'listtest.php' SQL Injection
CVE-2008-1919—webappsphp
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Particle Blogger 1.2.0 - 'post.php?postid' SQL Injection
CVE-2007-1510—webappsphp
SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Getacoder clone - 'sb_protype' SQL Injection
CVE-2008-3372—webappsphp
SQL injection vulnerability in search_form.php in Getacoder Clone allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência✓ VexDay Proof
InoutMailingListManager 3.1 - Remote Command Execution
CVE-2007-2002—webappsphp
InoutMailingListManager 3.1 and earlier allows remote attackers to access certain restricted functionality, and upload a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke 8.0 Final - 'sid' SQL Injection
CVE-2008-0461—webappsphp
SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Datsogallery 1.6 - Blind SQL Injection
CVE-2008-5208—webappsphp
SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows remo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ocean12 Membership Manager Pro - Authentication Bypass
CVE-2008-6371—webappsphp
SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
← anteriorpágina 117 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.