Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
84.600exploits catalogados
39.734CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.742Exploit-DB 24.486GitHub PoC 16.618VulnCheck XDB 9736Nuclei 4493Metasploit 3525✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
TinyCMS 1.1.2 - 'templater.php' Local File Inclusion
Directory traversal vulnerability in templater.php in the ZZ_Templater module in TinyCMS 1.1.2, when register_globals is
23RIESGO
abrir ↗Referência✓ VexDay Proof
Winamp 5.34 - '.mp4' Code Execution
libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .
28RIESGO
abrir ↗Referência✓ VexDay Proof
Podcast Generator 1.1 - Remote Code Execution
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions
23RIESGO
abrir ↗Referência✓ VexDay Proof
PHP Net Tools 2.7.1 - Remote Code Execution
nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in th
23RIESGO
abrir ↗Referência✓ VexDay Proof
DynamicPAD 1.02.18 - 'HomeDir' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitr
23RIESGO
abrir ↗Referência✓ VexDay Proof
Tropicalm Crowell Resource 4.5.2 - 'RESPATH' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Tropicalm Crowell Resource 4.5.2 allow remote attackers to execute
23RIESGO
abrir ↗Referência✓ VexDay Proof
FdWeB Espace Membre 2.01 - 'path' Remote File Inclusion
PHP remote file inclusion vulnerability in _admin/admin_menu.php in FdWeB Espace Membre 2.1 and earlier allows remote at
23RIESGO
abrir ↗Referência✓ VexDay Proof
SFS EZ Gaming Cheats - SQL Injection
SQL injection vulnerability in view_reviews.php in Scripts for Sites (SFS) EZ Gaming Cheats allows remote attackers to e
23RIESGO
abrir ↗Referência✓ VexDay Proof
Mutant 0.9.2 - 'mutant_functions.php' Remote File Inclusion
PHP remote file inclusion vulnerability in mutant_functions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote a
23RIESGO
abrir ↗Referência✓ VexDay Proof
Expow 0.8 - 'autoindex.php?cfg_file' Remote File Inclusion
PHP remote file inclusion vulnerability in autoindex.php in Expow 0.8 allows remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗Referência✓ VexDay Proof
NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion
PHP remote file inclusion vulnerability in inc/nuke_include.php in newsSync 1.5.0rc6 allows remote attackers to execute
23RIESGO
abrir ↗Referência✓ VexDay Proof
MyCMS 0.9.8 - Remote Command Execution (2)
PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗Referência✓ VexDay Proof
eXtremail 2.1.1 - Remote Heap Overflow (PoC)
Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending
28RIESGO
abrir ↗Referência✓ VexDay Proof
PHPtree 1.3 - 'cms2.php?s_dir' Remote File Inclusion
PHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbi
23RIESGO
abrir ↗Referência✓ VexDay Proof
WEBBDOMAIN WebShop 1.02 - SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in detail.php in Multi Languages WebShop Online 1.02 allows remote attackers to
23RIESGO
abrir ↗Referência✓ VexDay Proof
AV Tutorial Script 1.0 - Remote User Pass Change
changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for
23RIESGO
abrir ↗Referência✓ VexDay Proof
CoAST 0.95 - 'sections_file' Remote File Inclusion
PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows
23RIESGO
abrir ↗Referência✓ VexDay Proof
Mailist 3.0 - Insecure Backup / Local File Inclusion
admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access
23RIESGO
abrir ↗Referência✓ VexDay Proof
CoolPlayer Portable 2.19.1 - '.m3u' Local Buffer Overflow (2)
Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows rem
28RIESGO
abrir ↗Referência✓ VexDay Proof
Easy Scripts Answer and Question Script - Multiple Vulnerabilities
myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a
23RIESGO
abrir ↗Referência✓ VexDay Proof
MySpeach 3.0.7 - Local/Remote File Inclusion
PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, all
23RIESGO
abrir ↗Referência✓ VexDay Proof
Acc PHP eMail 1.1 - Insecure Cookie Handling
Acc PHP eMail 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the NEWSLET
23RIESGO
abrir ↗Referência✓ VexDay Proof
yourplace 1.0.2 - Multiple Vulnerabilities / Remote Code Execution
login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account
23RIESGO
abrir ↗Referência✓ VexDay Proof
Archangel Weblog 0.90.02 - Local File Inclusion / Authentication Bypass
Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary fil
23RIESGO
abrir ↗Referência✓ VexDay Proof
East Wind Software - 'advdaudio.ocx 1.5.1.1' Local Buffer Overflow
Buffer overflow in the East Wind Software advdaudio.ocx 1.5.1.1 ActiveX control allows user-assisted remote attackers to
23RIESGO
abrir ↗Referência✓ VexDay Proof
Broadcast Machine 0.1 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
fresh email script 1.0 - Multiple Vulnerabilities
PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote att
23RIESGO
abrir ↗Referência✓ VexDay Proof
Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution
Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attacker
23RIESGO
abrir ↗Referência✓ VexDay Proof
MyCMS 0.9.8 - Remote Command Execution (2)
Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗Referência✓ VexDay Proof
WebPortal CMS 0.6.0 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.