Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.924exploits catalogados
38.251CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.506Exploit-DB 24.485GitHub PoC 15.787VulnCheck XDB 9186Nuclei 4448Metasploit 3512✓ solo verificadosrecientespopularesriesgo
81.924 exploits
Exploit-DB✓ VexDay Proof
dl_stats - Multiple Vulnerabilities
CVE-2010-1497—webappsphp18 abr 2010
Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion
CVE-2010-1956—webappsphp18 abr 2010
Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component iF surfALERT 1.2 - Local File Inclusion
CVE-2010-1717—webappsphp18 abr 2010
Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attacke
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
dl_stats - Multiple Vulnerabilities
CVE-2010-1498—webappsphp18 abr 2010
Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion
CVE-2010-1723—webappsphp18 abr 2010
Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! all
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion
CVE-2010-1954—webappsphp18 abr 2010
Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allow
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0269—doswindows17 abr 2010
The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1,
28RIESGO
abrir ↗
Exploit-DB
Multiple Vendor AgentX++ - Stack Buffer Overflow (PoC)
CVE-2010-1318—doswindows17 abr 2010
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Ser
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0270—doswindows17 abr 2010
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction re
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0477—doswindows17 abr 2010
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 respon
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0476—doswindows17 abr 2010
The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allo
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP RapidKill Pro 5.x - Arbitrary File Upload
CVE-2006-5918—webappsphp17 abr 2010
Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows rem
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JoltCard 1.2.1 - SQL Injection
CVE-2010-1496—webappsphp16 abr 2010
SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache OFBiz - Admin Creator
CVE-2010-0432—remotemultiple16 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlie
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - SMB Client-Side Bug (PoC) (MS10-006)
CVE-2010-0017—doswindows16 abr 2010
Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB serv
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache OFBiz - Remote Execution (via SQL Execution)
CVE-2010-0432—remotemultiple16 abr 2010
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlie
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SIESTTA 2.0 - Local File Inclusion / Cross-Site Scripting
CVE-2010-1710—webappsphp16 abr 2010
Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SIESTTA 2.0 - Local File Inclusion / Cross-Site Scripting
CVE-2010-1711—webappsphp16 abr 2010
Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows r
23RIESGO
abrir ↗
Metasploit400
AgentX++ Master AgentX::receive_agentx Stack Buffer Overflow
CVE-2010-1318—16 abr 2010
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Ser
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management Module - Denial of Service
CVE-2010-1460—doshardware15 abr 2010
The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sh
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
60cycleCMS 2.5.2 - 'DOCUMENT_ROOT' Multiple Local File Inclusions
CVE-2010-1951—webappsphp15 abr 2010
Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component Intellectual Property 1.5.3 - 'id' SQL Injection
CVE-2010-1721—webappsphp15 abr 2010
SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! al
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component BeeHeard 1.0 - Local File Inclusion
CVE-2010-1952—webappsphp14 abr 2010
Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Photo Battle 1.0.1 - Local File Inclusion
CVE-2010-1461—webappsphp14 abr 2010
Directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attack
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JA Comment - Local File Inclusion
CVE-2010-1601—webappsphp14 abr 2010
Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to rea
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bild Flirt System 1.0 - SQL Injection
CVE-2010-0955—webappsphp14 abr 2010
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mocha LPD 1.9 - Remote Buffer Overflow (Denial of Service) (PoC)
CVE-2010-1687—doswindows14 abr 2010
Stack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9 allows remote attackers to cause a denial of service (crash)
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Love Factory 1.3.4 - Local File Inclusion
CVE-2010-1957—webappsphp14 abr 2010
Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attack
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Almnzm 2.1 - SQL Injection
CVE-2010-5055—webappsphp14 abr 2010
SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component MT Fire Eagle 1.2 - Local File Inclusion
CVE-2010-1719—webappsphp14 abr 2010
Directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla! allows remote attacke
38RIESGO
abrir ↗
← anteriorpágina 1304 / 2731siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.