Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.859exploits catalogados
38.203CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.483Referência 24.469GitHub PoC 15.768VulnCheck XDB 9182Nuclei 4447Metasploit 3510✓ solo verificadosrecientespopularesriesgo
81.859 exploits
Exploit-DB✓ VexDay Proof
iScripts EasySnaps 2.0 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB
Joomla! Component com_wmtpic 1.0 - SQL Injection
SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Joomanager - SQL Injection
SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB
Joomla! Component Gamesbox 1.0.2 - 'id' SQL Injection
SQL injection vulnerability in the JOOFORGE Gamesbox (com_gamesbox) component 1.0.2, and possibly earlier, for Joomla! a
23RIESGO
abrir ↗Exploit-DB
Specialist Bed and Breakfast Website - SQL Injection
SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebDM CMS - SQL Injection
SQL injection vulnerability in cont_form.php in Internet DM WebDM CMS allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TornadoStore 1.4.3 - SQL Injection / HTML Injection
Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Miyabi CGI Tools 1.02 - 'index.pl' Remote Command Execution
index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacte
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PageDirector CMS - 'result.php' SQL Injection
SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CANDID - '/image/view.php?image_id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Reader 9.3.2 - 'CoolType.dll' Remote Memory Corruption / Denial of Service
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, al
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CANDID - '/image/view.php?image_id' SQL Injection
SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
YPNinc JokeScript - 'ypncat_id' SQL Injection
SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB
Ecomat CMS - SQL Injection
SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Bible Search - 'bible.php?chapter' SQL Injection
SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart PHP 4.3.x - 'shipkey' SQL Injection
SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Bible Search - 'bible.php?chapter' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PageDirector CMS - Multiple Vulnerabilities
siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PageDirector CMS - Multiple Vulnerabilities
SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
i-netsolution Job Search Engine - SQL Injection
SQL injection vulnerability in show_search_result.php in i-netsolution Job Search Engine allows remote attackers to exec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz ybiz Polls Script - SQL Injection
SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Swoopo Clone 2010 - SQL Injection
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JE Awd Song - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component jesectionfinder - Local File Inclusion
Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla!
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_sef - Remote File Inclusion
PHP remote file inclusion vulnerability in the SEF404x (com_sef) component for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Adaptive Security Response - HTTP Response Splitting
CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series de
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
feh 1.7 - '--wget-Timestamp' Remote Code Execution
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz - Multiple SQL Injections
Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB
Joomla! Component jesubmit 1.4 - SQL Injection
SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz The Web Template Software - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitra
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.