Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.150exploits catalogados
39.601CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.629Exploit-DB 24.485GitHub PoC 16.343VulnCheck XDB 9680Nuclei 4488Metasploit 3525✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
Jupiter CMS 1.1.5 - '/index.php' Local/Remote File Inclusion
CVE-2007-0987—webappsphp
Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Restaurante - Arbitrary File Upload
CVE-2007-4817—webappsphp
Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Prozilla Top 100 1.2 - Arbitrary Delete Stats
CVE-2008-1785—webappsphp
delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary user
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ASPReferral 5.3 - 'AccountID' Blind SQL Injection
CVE-2008-6889—webappsasp
SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
webSPELL 4.01.02 - 'showonly' Blind SQL Injection
CVE-2007-1019—webappsphp
SQL injection vulnerability in news.php in webSPELL 4.01.02, when register_globals is enabled, allows remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
rdesktop 1.5.0 - 'iso_recv_msg()' Integer Underflow (PoC)
CVE-2008-1801—doslinux
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of se
28RIESGO
abrir ↗
Referência✓ VexDay Proof
SasCam WebCam Server 2.6.5 - ActiveX Remote Buffer Overflow
CVE-2008-6898—remotewindows
Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote
50RIESGO
abrir ↗
Referência✓ VexDay Proof
WengoPhone 2.x - SIP Phone Remote Denial of Service
CVE-2007-4366—doswindows
WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Service Provider Management System v1.0 - SQL Injection
CVE-2023-34581—webappsphp
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Exodus 0.10 - URI Handler Arbitrary Parameter Injection (1)
CVE-2008-6935—remotewindows
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, over
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Apple QuickTime - 'rtsp URL Handler' Remote Stack Buffer Overflow
CVE-2007-0015—remotemultiple
Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.
50RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component JoomlaXplorer 1.6.2 - Remote s
CVE-2008-1849—webappsphp
Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 an
23RIESGO
abrir ↗
Referência✓ VexDay Proof
UeberProject 1.0 - '/login/secure.php' Remote File Inclusion
CVE-2006-5539—webappsphp
PHP remote file inclusion vulnerability in login/secure.php in UeberProject Management System 1.0 and earlier allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ScriptsFeed (SF) Real Estate Classifieds Software - Arbitrary File Upload
CVE-2008-6942—webappsphp
Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sinapis 2.2 Gastebuch - 'sinagb.php?fuss' Remote File Inclusion
CVE-2007-1130—webappsphp
PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AuraCMS 2.1 - Remote File Attachment / Local File Inclusion
CVE-2007-4905—webappsphp
Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XZero Community Classifieds 4.95.11 - Local File Inclusion / SQL Injection
CVE-2007-6567—webappsphp
Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Virtual DJ 5.0 - '.m3u' Local Buffer Overflow
CVE-2007-4735—localwindows
Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Wireshark < 0.99.5 - DNP3 Dissector Infinite Loop
CVE-2007-6113—doslinux
Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
X10media Mp3 Search Engine 1.6 - Remote File Disclosure
CVE-2008-6960—webappsphp
download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Formbankserver 1.9 - 'Name' Directory Traversal
CVE-2007-0055—remotewindows
Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Site Sift Listings - 'id' SQL Injection
CVE-2008-1869—webappsphp
SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id p
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Remote Buffer Overflow
CVE-2008-4048—remotewindows
Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Simple Web Content Management System - SQL Injection
CVE-2007-0093—webappsphp
SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SkaLinks 1.5 - 'register.php' Arbitrary Add Editor
CVE-2008-7010—webappsphp
Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling
CVE-2008-7019—webappsphp
Esqlanelapse 2.6.1 and 2.6.2 allows remote attackers to bypass authentication and gain privileges via modified (1) enomb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AllMyVisitors 0.4.0 - 'index.php' Remote File Inclusion
CVE-2007-0170—webappsphp
PHP remote file inclusion vulnerability in index.php in AllMyVisitors 0.4.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Photo Gallery 1.0 - 'photo_id' SQL Injection
CVE-2008-1875—webappsphp
SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebMod 0.48 - Content-Length Remote Buffer Overflow
CVE-2007-1260—remotewindows
Stack-based buffer overflow in the connectHandle function in server.cpp in WebMod 0.48 allows remote attackers to execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPLojaFacil 0.1.5 - 'path_local' Remote File Inclusion
CVE-2007-2615—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arbi
23RIESGO
abrir ↗
← anteriorpágina 130 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.