Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.924exploits catalogados
38.251CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.506Exploit-DB 24.485GitHub PoC 15.787VulnCheck XDB 9186Nuclei 4448Metasploit 3512✓ solo verificadosrecientespopularesriesgo
81.924 exploits
Metasploit600
JBoss JMX Console Beanshell Deployer WAR Upload and Deployment
CVE-2010-0738LOWbajo ataqueransomware26 abr 2010
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
CMScout 2.08 - SQL Injection
CVE-2010-5059—webappsphp26 abr 2010
SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass
CVE-2010-1703—webappsphp26 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenCominterne 1.01 - Local File Inclusion
CVE-2010-1936—webappsphp26 abr 2010
Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled
23RIESGO
abrir ↗
Exploit-DB
Kasseler CMS 2.0.5 - Bypass / Download Backup
CVE-2009-4822—webappsphp26 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TR Forum 1.5 - Cross-Site Request Forgery (Add Admin)
CVE-2006-4584—webappsphp25 abr 2010
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and passwo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP System Management Homepage - 'RedirectUrl' Open Redirection
CVE-2010-1586—remotemultiple25 abr 2010
Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to re
43RIESGO
abrir ↗
Exploit-DB
Invision Power Board - Denial of Service
CVE-2006-0888—dosmultiple25 abr 2010
index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unsp
23RIESGO
abrir ↗
Exploit-DB
Madirish Webmail 2.01 - 'baseDir' Local/Remote File Inclusion
CVE-2007-2826—webappsphp24 abr 2010
PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execut
23RIESGO
abrir ↗
Exploit-DB
WHMCompleteSolution (WHMCS) control (WHMCompleteSolution) - SQL Injection
CVE-2010-1702—webappsphp24 abr 2010
SQL injection vulnerability in submitticket.php in WHMCompleteSolution (WHMCS) 4.2 allows remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Openfoncier 2.00 - Local File Inclusion / Remote File Inclusion
CVE-2010-1945—webappsphp24 abr 2010
Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, all
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Openplanning 1.00 - Local File Inclusion / Remote File Inclusion
CVE-2010-1934—webappsphp24 abr 2010
Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, al
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Openpresse 1.01 - Local File Inclusion
CVE-2010-1935—webappsphp24 abr 2010
Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, al
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Openfoncier 2.00 - Local File Inclusion / Remote File Inclusion
CVE-2010-1948—webappsphp24 abr 2010
Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when register_globals is enabled, a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
NCT Jobs Portal Script - Cross-Site Scripting / Authentication Bypass
CVE-2010-1604—webappsphp24 abr 2010
Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ZipWrangler 1.20 - '.zip' File (SEH)
CVE-2010-1685—localwindows24 abr 2010
Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
NCT Jobs Portal Script - Cross-Site Scripting / Authentication Bypass
CVE-2010-1606—webappsphp24 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alstrasoft AskMe Pro 2.1 - 'que_id' SQL Injection
CVE-2007-4085—webappsphp24 abr 2010
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Openplanning 1.00 - Local File Inclusion / Remote File Inclusion
CVE-2010-1928—webappsphp24 abr 2010
Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.6 - HFS FileSystem (Denial of Service)
CVE-2010-0105—dososx24 abr 2010
The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not
23RIESGO
abrir ↗
Exploit-DB
NKINFOWEB - SQL Injection
CVE-2010-1599—webappsphp23 abr 2010
SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Exploit-DB
Microsoft Windows XP/2000/2003 - 'win32k.sys' SfnLOGONNOTIFY Local kernel Denial of Service
CVE-2010-1894—doswindows22 abr 2010
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not p
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenSSL - Remote Denial of Service
CVE-2010-0740—doslinux22 abr 2010
The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial
28RIESGO
abrir ↗
Exploit-DB
Microsoft Windows XP/2000/2003 - 'win32k.sys' SfnLOGONNOTIFY Local kernel Denial of Service
CVE-2010-1735—doswindows22 abr 2010
The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local user
23RIESGO
abrir ↗
Metasploit300
Xftp FTP Client 3.0 PWD Remote Buffer Overflow
CVE-2010-20122CRITICAL22 abr 2010
Xftp FTP Client <= 3.0 PWD Response Buffer Overflow
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Tomcat 5.5.0 < 5.5.29 / 6.0.0 < 6.0.26 - Information Disclosure
CVE-2010-1157—remotemultiple22 abr 2010
Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostna
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache ActiveMQ 5.2/5.3 - Source Code Information Disclosure
CVE-2010-1587—remotemultiple22 abr 2010
The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AJ Matrix 3.1 - 'id' Multiple SQL Injections
CVE-2009-2779—webappsphp22 abr 2010
SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AJ Shopping Cart 1.0 (maincatid) - SQL Injection
CVE-2010-1876—webappsphp22 abr 2010
SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Exploit-DB
cms (id) 5.0 - SQL Injection
CVE-2009-2439—webappsphp22 abr 2010
Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrar
23RIESGO
abrir ↗
← anteriorpágina 1302 / 2731siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.