Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.150exploits catalogados
39.601CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.629Exploit-DB 24.485GitHub PoC 16.343VulnCheck XDB 9680Nuclei 4488Metasploit 3525✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
WengoPhone 2.x - SIP Phone Remote Denial of Service
CVE-2007-4366—doswindows
WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Service Provider Management System v1.0 - SQL Injection
CVE-2023-34581—webappsphp
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WordPress Plugin E-Commerce 3.4 - Arbitrary File Upload
CVE-2008-6811—webappsphp
Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Alstrasoft SendIt Pro - Arbitrary File Upload
CVE-2008-6932—webappsphp
Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)
CVE-2009-1057—doswindows
MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that tri
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPAddressBook 2.11 - 'view.php' SQL Injection
CVE-2008-1847—webappsphp
SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Multiple Newsletters 2.7 - Local File Inclusion / Cross-Site Scripting
CVE-2008-5566—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
UeberProject 1.0 - '/login/secure.php' Remote File Inclusion
CVE-2006-5539—webappsphp
PHP remote file inclusion vulnerability in login/secure.php in UeberProject Management System 1.0 and earlier allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ScriptsFeed (SF) Real Estate Classifieds Software - Arbitrary File Upload
CVE-2008-6942—webappsphp
Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sinapis 2.2 Gastebuch - 'sinagb.php?fuss' Remote File Inclusion
CVE-2007-1130—webappsphp
PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AuraCMS 2.1 - Remote File Attachment / Local File Inclusion
CVE-2007-4905—webappsphp
Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XZero Community Classifieds 4.95.11 - Local File Inclusion / SQL Injection
CVE-2007-6567—webappsphp
Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DFLabs PTK 1.0 - Local Command Execution
CVE-2008-6793—webappsphp
The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sun xVM VirtualBox < 1.6.4 - Privilege Escalation (PoC)
CVE-2008-3431HIGHbajo ataquedosmultiple
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communicat
71RIESGO
abrir ↗
Referência✓ VexDay Proof
Discuz! - Remote Reset User Password
CVE-2008-6957—webappsphp
member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostp
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IMGallery 2.5 - Create Uploader Script
CVE-2007-0082—webappsphp
users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OmniWeb 5.5.1 - JavaScript alert() Remote Format String (PoC)
CVE-2007-0148—dososx
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service (application
23RIESGO
abrir ↗
Referência✓ VexDay Proof
The Rat CMS Alpha 2 - Authentication Bypass
CVE-2008-7003—webappsphp
Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Google Chrome - Carriage Return Null Object Memory Exhaustion
CVE-2008-4340—doswindows
Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VideoScript 4.0.1.50 - Change Admin Password
CVE-2008-5219—webappsphp
The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authent
23RIESGO
abrir ↗
Referência✓ VexDay Proof
The Gemini Portal 4.7 - Insecure Cookie Handling
CVE-2008-7024—webappsphp
admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FreshView 7.15 - '.psp' Local Buffer Overflow
CVE-2007-2283—localwindows
Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP fi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TalkBack 2.2.7 - Multiple Remote File Inclusions
CVE-2007-6105—webappsphp
Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joovili 3.0.6 - 'joovili.images.php' Remote File Disclosure
CVE-2007-6620—webappsphp
Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary fil
23RIESGO
abrir ↗
Referência✓ VexDay Proof
visualpic 0.3.1 - Remote File Inclusion
CVE-2008-1876—webappsphp
PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PHP
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Autodesk DWF Viewer Control / LiveUpdate Module - Remote Code Execution
CVE-2008-4471—remotewindows
Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0
23RIESGO
abrir ↗
Referência✓ VexDay Proof
mini-pub 0.3 - File Disclosure / Code Execution
CVE-2008-5580—webappsphp
mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metachara
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XplodPHP AutoTutorials 2.1 - 'id' SQL Injection
CVE-2008-1889—webappsphp
SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magic_quotes_gpc is disabled,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Free PHP VX Guestbook 1.06 - Arbitrary Database Backup
CVE-2008-7006—webappsphp
Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ImageShack Toolbar 4.5.7 - 'FileUploader' Class InsecureMethod
CVE-2008-4549—remotewindows
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69,
23RIESGO
abrir ↗
← anteriorpágina 134 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.