Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.150exploits catalogados
39.601CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.629Exploit-DB 24.485GitHub PoC 16.343VulnCheck XDB 9680Nuclei 4488Metasploit 3525✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
PHP 5.x COM - Safe Mode / disable_functions Bypass
CVE-2007-5653—localwindows
The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restricti
23RIESGO
abrir ↗
Referência✓ VexDay Proof
dBpowerAMP Audio Player 2 - '.m3u' Buffer Overflow (PoC)
CVE-2008-0661—doswindows
Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file w
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebXell Editor 0.1.3 - Arbitrary File Upload
CVE-2008-3178—webappsphp
Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPMesFilms 1.0 - 'index.php?id' SQL Injection
CVE-2009-0598—webappsphp
SQL injection vulnerability in index.php in PhpMesFilms 1.0 and 1.8 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
STWC-Counter 3.4.0 - 'downloadcounter.php' Remote File Inclusion
CVE-2007-1233—webappsphp
PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attacke
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LimeSurvey (phpsurveyor) 1.49rc2 - Remote File Inclusion
CVE-2007-3632—webappsphp
Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor) 1.49RC2 allow remote attackers to exe
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Amber Script 1.0 - 'show_content.php?id' Local File Inclusion
CVE-2007-6129—webappsphp
Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to inc
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS mod_gallery Zend_Hash_key + Extract - Remote File Inclusion
CVE-2008-0138—webappsphp
PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when registe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FlashBlog 0.31b - Arbitrary File Upload
CVE-2008-2574—webappsphp
Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NUVICO DVR NVDV4 / PdvrAtl Module 'PdvrAtl.DLL 1.0.1.25' - Remote Buffer Overflow
CVE-2008-4547—remotewindows
Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) in DVRHOST Web CMS OCX 1.0.1.25 allows
28RIESGO
abrir ↗
Referência✓ VexDay Proof
FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation
CVE-2009-0641—localfreebsd
sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a metho
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Simple PHP News 1.0 - Remote Command Execution
CVE-2009-0643—webappsphp
Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Simplog 0.9.2 - 's' Remote Command Execution
CVE-2006-1776—webappsphp
PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote atta
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Angel Lms 7.1 - 'default.asp?id' SQL Injection
CVE-2007-1250—webappsasp
SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
opensurveypilot 1.2.1 - Remote File Inclusion
CVE-2007-2166—webappsphp
PHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in OpenSurveyPilot (osp) 1.2.1 and earl
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TPTEST 3.1.7 - Stack Buffer Overflow (PoC)
CVE-2009-0650—doswindows
Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows remo
28RIESGO
abrir ↗
Referência✓ VexDay Proof
FlashBB 1.1.8 - 'sendmsg.php' Remote File Inclusion
CVE-2007-3697—webappsphp
PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to exe
28RIESGO
abrir ↗
Referência✓ VexDay Proof
DivX Web Player 1.3.0 - 'npdivx32.dll' Remote Denial of Service
CVE-2007-1294—doswindows
A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ravennuke 2.3.0 - Multiple Vulnerabilities
CVE-2009-0672—webappsphp
SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated
23RIESGO
abrir ↗
Referência✓ VexDay Proof
A-shop 0.70 - Remote File Deletion
CVE-2007-3937—webappsasp
Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' ActiveX Buffer Overflow
CVE-2008-0634—remotewindows
Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
dotCMS 1.6 - 'id' Local File Inclusion
CVE-2008-3708—webappsphp
Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Advanced Electron Forum 1.0.6 - Remote Code Execution
CVE-2008-5090—webappsphp
Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code em
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Magic CMS 4.2.747 - 'mysave.php' Remote File Inclusion
CVE-2007-1393—webappsphp
PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Focus/SIS 1.0/2.2 - Remote File Inclusion
CVE-2007-4806—webappsphp
PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EZWebAlbum - Remote File Disclosure
CVE-2008-3293—webappsphp
Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ads Pro - 'dhtml.pl' Remote Command Execution
CVE-2008-6826—webappscgi
dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page par
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fuju News 1.0 - Authentication Bypass / SQL Injection
CVE-2006-1838—webappsphp
edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WFTPD Pro Server 3.23.1.1 - 'APPE' Remote Buffer Overflow (PoC)
CVE-2006-5826—doswindows
Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbitr
28RIESGO
abrir ↗
Referência✓ VexDay Proof
RealPlayer 10 - '.ra' Remote Denial of Service
CVE-2007-2497—doswindows
RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service (memory consumption) via a certain
23RIESGO
abrir ↗
← anteriorpágina 132 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.