Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.156exploits catalogados
38.964CVEs con explotación pública
24.695probados en laboratorio
83.156 exploits
Exploit-DB✓ VexDay Proof
Civica - 'Display.asp' SQL Injection
CVE-2006-7231—webappsasp05 oct 2006
SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (2)
CVE-2006-5143—remotewindows05 oct 2006
Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve B
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP 3 < 5 - ZendEngine ECalloc Integer Overflow
CVE-2006-4812—remotephp05 oct 2006
Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argume
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/tax_rates.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/orders_status.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB Static Topics 1.0 - 'phpbb_root_path' File Inclusion
CVE-2006-5191—webappsphp04 oct 2006
PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/currencies.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/banner_manager.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/banner_statistics.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion
CVE-2006-5209—webappsphp04 oct 2006
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
JAF CMS 4.0 RC1 - Multiple Remote File Inclusions
CVE-2006-7127—webappsphp04 oct 2006
Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPGreetz 0.99 - 'footer.php' Remote File Inclusion
CVE-2006-5192—webappsphp04 oct 2006
PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/newsletters.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/reviews.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/stats_products_purchased.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
JAF CMS 4.0 RC1 - Multiple Remote File Inclusions
CVE-2008-1609—webappsphp04 oct 2006
Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/specials.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/products_attributes.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/manufacturers.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/countries.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/zones.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/languages.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/products_expected.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/tax_classes.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/stats_products_viewed.php?page' Cross-Site Scripting
CVE-2006-5190—webappsphp04 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
JAF CMS 4.0 RC1 - 'forum.php' Remote File Inclusion
CVE-2008-1609—webappsphp03 oct 2006
Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Motorola SB4200 - Remote Denial of Service
CVE-2006-5196—doshardware03 oct 2006
The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (de
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Web Scripts Easy Banner - 'functions.php' Remote File Inclusion
CVE-2006-5166—webappsphp02 oct 2006
PHP remote file inclusion vulnerability in functions.php in PHP Web Scripts Easy Banner Free allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Digishop 4.0 - 'cart.php' Cross-Site Scripting
CVE-2006-5164—webappsphp02 oct 2006
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DeluxeBB 1.09 - 'Sig.php' Remote File Inclusion
CVE-2006-5154—webappsphp02 oct 2006
PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗
← anteriorpágina 1525 / 2772siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.