Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.554exploits catalogados
39.165CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.281Exploit-DB 24.485GitHub PoC 16.153VulnCheck XDB 9636Nuclei 4476Metasploit 3523✓ solo verificadosrecientespopularesriesgo
83.554 exploits
Exploit-DB✓ VexDay Proof
Mambo Component perForms 1.0 - Remote File Inclusion
CVE-2006-3774—webappsphp17 jul 2006
PHP remote file inclusion vulnerability in performs.php in the perForms component (com_performs) 1.0 and earlier for Joo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mambo Component pollxt 1.22.07 - Remote File Inclusion
CVE-2006-5045—webappsphp17 jul 2006
Unspecified vulnerability in PollXT component (com_pollxt) 1.22.07 and earlier for Joomla! has unspecified impact and at
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mambo Module Calendar 1.5.7 - 'Com_Calendar.php' Remote File Inclusion
CVE-2006-3843—webappsphp17 jul 2006
PHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote att
23RIESGO
abrir ↗
Metasploit200
McAfee ePolicy Orchestrator / ProtectionPilot Overflow
CVE-2006-5156—17 jul 2006
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attac
60RIESGO
abrir ↗
Metasploit300
MS06-057 Microsoft Internet Explorer WebViewFolderIcon setSlice() Overflow
CVE-2006-3730HIGH17 jul 2006
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service
68RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
D-Link Routers - UPNP Buffer Overflow
CVE-2006-3687—doshardware17 jul 2006
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Agnitum Outpost Firewall 3.5.631 - 'FiltNT.SYS' Local Denial of Service
CVE-2006-3696—doswindows17 jul 2006
filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462) allows local users to cause a denial of service (crash) vi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FlushCMS 1.0.0-pre2 - 'class.rich.php' Remote File Inclusion
CVE-2006-3755—webappsphp16 jul 2006
PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remot
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service
CVE-2006-3787—doshardware15 jul 2006
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API fun
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-5035—webappsphp15 jul 2006
Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 a
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Rocks Clusters 4.1 - 'umount-loop' Local Privilege Escalation
CVE-2006-3693—locallinux15 jul 2006
Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) i
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2006-3775—webappsphp15 jul 2006
SQL injection vulnerability in the init function in class_session.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
CVE-2006-3392—remotemultiple15 jul 2006
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Rocks Clusters 4.1 - 'mount-loop' Local Privilege Escalation
CVE-2006-3693—locallinux15 jul 2006
Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) i
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-4885—webappsphp15 jul 2006
PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions pre
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-5034—webappsphp15 jul 2006
Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger ha
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-4858—webappsphp15 jul 2006
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without r
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
CVE-2011-4084—webappsphp15 jul 2006
20RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (4)
CVE-2006-2451—locallinux14 jul 2006
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
KDE Konqueror 3.5.x - ReplaceChild Denial of Service
CVE-2006-3672—doslinux14 jul 2006
KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft PowerPoint 2003 - 'powerpnt.exe' Remote Overflow
CVE-2006-3660—remotewindows14 jul 2006
Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to po
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft PowerPoint 2003 - 'mso.dll' '.PPT' Processing Code Execution
CVE-2006-3655—remotewindows14 jul 2006
Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary co
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Subberz Lite - UserFunc Remote File Inclusion
CVE-2006-3689—webappsphp14 jul 2006
PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft PowerPoint 2003 - '.ppt' File Closure Memory Corruption
CVE-2006-3656—remotewindows14 jul 2006
Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a c
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Phorum 5 - 'pm.php' Arbitrary Local Inclusion
CVE-2006-3611—webappsphp13 jul 2006
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FlatNuke 2.5.7 - 'index.php' Remote File Inclusion
CVE-2006-3608—webappsphp13 jul 2006
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (3)
CVE-2006-2451—locallinux13 jul 2006
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoCycle 1.0 - 'PhotoCycle.php' Cross-Site Scripting
CVE-2006-3680—webappsphp13 jul 2006
Cross-site scripting (XSS) vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Dream4 Koobi Pro 5.6 - 'showtopic' SQL Injection
CVE-2006-3621—webappsphp13 jul 2006
SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - RevealTrans Denial of Service
CVE-2006-3605—doswindows12 jul 2006
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition pro
28RIESGO
abrir ↗
← anteriorpágina 1550 / 2786siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.