Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

82.252exploits catalogados
38.481CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.678Exploit-DB 24.485GitHub PoC 15.900VulnCheck XDB 9221Nuclei 4455Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.252 exploits
Exploit-DB✓ VexDay Proof
PHP-Address Book 3.1.5 - SQL Injection / Cross-Site Scripting
CVE-2013-1748—webappsphp04 jun 2008
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
NASA Ames Research Center BigView 1.8 - '.PNM' Stack Buffer Overflow (PoC)
CVE-2008-2542—dosmultiple04 jun 2008
Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-as
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll RegistryString' Buffer Overflow
CVE-2007-5607—doswindows04 jun 2008
Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll ExtractCab' ActiveX Control Buffer Overflow
CVE-2007-5604—remotewindows03 jun 2008
Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in H
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6674—webappsphp03 jun 2008
mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of r
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6678—webappsphp03 jun 2008
SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Delete
CVE-2007-5610—doswindows03 jun 2008
The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Sup
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6676—webappsphp03 jun 2008
QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any pa
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6677—webappsphp03 jun 2008
Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll StartApp' ActiveX Control Insecure Method
CVE-2008-0953—doswindows03 jun 2008
The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6675—webappsphp03 jun 2008
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JooBlog 0.1.1 - Blind SQL Injection
CVE-2008-5051—webappsphp03 jun 2008
SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6673—webappsphp03 jun 2008
asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation
CVE-2008-0952—doswindows03 jun 2008
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant S
23RIESGO
abrir ↗
Metasploit600
Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute
CVE-2008-2551—03 jun 2008
The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force
50RIESGO
abrir ↗
Metasploit200
Alt-N SecurityGateway username Buffer Overflow
CVE-2008-4193—02 jun 2008
Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alt-N MDaemon 9.6.5 - Multiple Remote Buffer Overflows (PoC)
CVE-2008-2631—doswindows02 jun 2008
The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samba 3.0.29 (Client) - 'receive_smb_raw()' Buffer Overflow (PoC)
CVE-2008-4189—dosmultiple01 jun 2008
20RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Social Site Generator 2.0 - 'sgc_id' SQL Injection
CVE-2008-6421—webappsphp31 may 2008
PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TorrentTrader Classic 1.x - 'scrape.php' SQL Injection
CVE-2008-6418—webappsphp31 may 2008
SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Social Site Generator 2.0 - 'sgc_id' SQL Injection
CVE-2008-6420—webappsphp31 may 2008
Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DotNetNuke 4.8.3 - 'Default.aspx' Cross-Site Scripting
CVE-2008-6644—webappsasp30 may 2008
Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inje
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Xerox DocuShare 6 - dsdn/dsweb/Services/User URI Cross-Site Scripting
CVE-2008-5225—remotehardware29 may 2008
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
dvbbs 8.2 - 'login.asp' Multiple SQL Injections
CVE-2008-5222—webappsasp29 may 2008
SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Xerox DocuShare 6 - docushare/dsweb/ServicesLib/Group URI Cross-Site Scripting
CVE-2008-5225—remotehardware29 may 2008
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Xerox DocuShare 6 - dsdn/dsweb/SearchResults URI Cross-Site Scripting
CVE-2008-5225—remotehardware29 may 2008
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBookingCalendar 10 d - SQL Injection
CVE-2006-1422—webappsphp29 may 2008
SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to exec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Calcium 3.10/4.0.4 - 'Calcium40.pl' Cross-Site Scripting
CVE-2008-2507—webappsphp28 may 2008
Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote att
23RIESGO
abrir ↗
Metasploit300
Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow
CVE-2008-0955—28 may 2008
Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote atta
50RIESGO
abrir ↗
Metasploit300
EMC AlphaStor Device Manager Arbitrary Command Execution
CVE-2008-2157—27 may 2008
robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands
30RIESGO
abrir ↗
← anteriorpágina 1415 / 2742siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.