Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.859exploits catalogados
38.203CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.483Referência 24.469GitHub PoC 15.768VulnCheck XDB 9182Nuclei 4447Metasploit 3510✓ solo verificadosrecientespopularesriesgo
81.859 exploits
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
CVE-2010-2656—webappsphp06 jul 2010
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before
23RIESGO
abrir ↗
Exploit-DB
Auto Dealer - SQL Injection
CVE-2010-4974—webappsphp06 jul 2010
SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to ex
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
CVE-2010-2655—webappsphp06 jul 2010
Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module
23RIESGO
abrir ↗
Exploit-DB
PsNews 1.3 - SQL Injection
CVE-2010-2716—webappsphp06 jul 2010
Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
CVE-2010-2654—webappsphp06 jul 2010
Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmwar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Lyrics 3.0 - Engine SQL Injection
CVE-2010-2721—webappsphp06 jul 2010
SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow
CVE-2010-2309—remoteosx06 jul 2010
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AutarTimonial 1.0.8 - SQL Injection
CVE-2010-5003—webappsphp06 jul 2010
SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component NeoRecruit 1.6.4 - 'Itemid' Blind SQL Injection
CVE-2010-4995—webappsphp06 jul 2010
SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to ex
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BS Business Directory - 'articlesdetails.php' SQL Injection
CVE-2010-4969—webappsphp06 jul 2010
SQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory allows remote attackers to
23RIESGO
abrir ↗
Metasploit500
EasyFTP Server LIST Command Stack Buffer Overflow
CVE-2024-0546MEDIUM05 jul 2010
EasyFTP LIST Command denial of service
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Canteen 1.0 - Local File Inclusion
CVE-2010-4977—webappsphp05 jul 2010
SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers t
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting
CVE-2010-2669—webappsphp05 jul 2010
Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attacker
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WikiWebHelp 0.28 - SQL Injection
CVE-2010-4970—webappsphp05 jul 2010
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
NewsOffice 2.0.18 - 'news_show.php' Cross-Site Scripting
CVE-2010-2844—webappsphp05 jul 2010
Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bs Recipes_Website Script - SQL Injection / Authentication Bypass
CVE-2010-2670—webappsphp05 jul 2010
SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB
PHPaaCMS 0.3.1 - 'show.php?id' SQL Injection
CVE-2010-2719—webappsphp04 jul 2010
SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB
Esoftpro Online Contact Manager - Multiple Vulnerabilities
CVE-2010-5001—webappsphp04 jul 2010
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Esoftpro Online Photo Pro 2 - Multiple Vulnerabilities
CVE-2010-4999—webappsphp04 jul 2010
SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Exploit-DB
Esoftpro Online Guestbook Pro - Multiple Vulnerabilities
CVE-2010-4996—webappsphp04 jul 2010
SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component Address Book - Blind SQL Injection
CVE-2010-4990—webappsphp04 jul 2010
SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attacke
23RIESGO
abrir ↗
Exploit-DB
PHPaaCMS - 'list.php?id' SQL Injection
CVE-2010-2720—webappsphp04 jul 2010
SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component NinjaMonials - Blind SQL Injection
CVE-2010-4991—webappsphp04 jul 2010
SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to exec
23RIESGO
abrir ↗
Exploit-DB
Esoftpro Online Guestbook Pro - Multiple Vulnerabilities
CVE-2009-4935—webappsphp04 jul 2010
SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TCW PHP Album - Multiple Vulnerabilities
CVE-2010-2714—webappsphp04 jul 2010
SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TCW PHP Album - Multiple Vulnerabilities
CVE-2010-2715—webappsphp04 jul 2010
Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TWiki History TWikiUsers - 'rev' Command Execution (Metasploit)
CVE-2005-2877—webappsphp03 jul 2010
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary co
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
System V Derived /bin/login - Extraneous Arguments Buffer Overflow (Metasploit)
CVE-2001-0797—remotelinux03 jul 2010
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RIESGO
abrir ↗
Exploit-DB
Joomla! Component eventCal 1.6.4 - Blind SQL Injection
CVE-2010-4993—webappsphp03 jul 2010
SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ProFTP 2.9 - Banner Remote Buffer Overflow (Metasploit)
CVE-2009-3976—remotewindows03 jul 2010
Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execu
43RIESGO
abrir ↗
← anteriorpágina 1280 / 2729siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.