Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.600exploits catalogados

39.734CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.742Exploit-DB 24.486GitHub PoC 16.618VulnCheck XDB 9736Nuclei 4493Metasploit 3525✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

Joomla! Component joovideo 1.2.2 - 'id' SQL Injection

CVE-2008-1460—webappsphp

SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Classifieds Script 05122008 - SQL Injection

CVE-2008-2453—webappsphp

Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FizzMedia 1.51.2 - SQL Injection

CVE-2008-3378—webappsphp

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ScozNews 1.2.1 - 'mainpath' Remote File Inclusion

CVE-2006-2487—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbit

23RIESGO

abrir ↗

Referência✓ VexDay Proof

NICE FAQ Script - Authentication Bypass

CVE-2008-6525—webappsphp

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

StrawBerry 1.1.1 - Local File Inclusion / Remote Command Execution

CVE-2009-1774—webappsphp

Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and exe

28RIESGO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche News 1.x - 'CAT_ID' SQL Injection

CVE-2007-1021—webappsasp

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mapbender 2.4.4 - 'mapFiler.php' Remote Code Execution

CVE-2008-0300—webappsphp

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpShop 0.8.1 - SQL Injection / Filter Bypass

CVE-2008-0681—webappsphp

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection

CVE-2008-2084—webappsphp

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to exec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPHoo3 < 5.2.6 - 'viewCat' SQL Injection

CVE-2008-3245—webappsphp

SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP infoboard 7 plus - Multiple Vulnerabilities

CVE-2008-4332—webappsphp

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ParsBlogger - 'blog.asp' SQL Injection

CVE-2008-5637—webappsphp

SQL injection vulnerability in blog.asp in ParsBlogger (Pb) allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FaScript FaUpload - SQL Injection

CVE-2008-5766—webappsphp

SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpcrs 2.06 - 'importFunction' Local File Inclusion

CVE-2008-6074—webappsphp

Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magic_quotes_gpc is disabled, allows rem

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Yet Another NOCC 0.1.0 - Local File Inclusion

CVE-2009-0515—webappsphp

Directory traversal vulnerability in check_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP recommend 1.3 - Authentication Bypass / Remote File Inclusion / Code Injection

CVE-2009-1780—webappsphp

admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, wh

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module XFsection 1.07 - 'articleId' Blind SQL Injection

CVE-2007-1974—webappsphp

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Barracuda Spam Firewall 3.5.11.020 Model 600 - SQL Injection

CVE-2008-1094—remotehardware

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 all

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Angelo-Emlak 1.0 - Multiple SQL Injections

CVE-2008-2048—webappsasp

Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject

23RIESGO

abrir ↗

Referência✓ VexDay Proof

W1L3D4 philboard 1.2 - Blind SQL Injection / Cross-Site Scripting

CVE-2008-5193—webappsphp

Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to injec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP::HTML 0.6.4 - 'PHPhtml.php' Remote File Inclusion

CVE-2007-3230—webappsphp

PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute

35RIESGO

abrir ↗

Referência✓ VexDay Proof

kubix 0.7 - Multiple Vulnerabilities

CVE-2006-7117—webappsphp

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

nicLOR Sito - includefile Local File Inclusion

CVE-2008-6290—webappsphp

Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_gp

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module horoscope 2.0 - Remote File Inclusion

CVE-2007-3236—webappsphp

PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to e

45RIESGO

abrir ↗

Referência✓ VexDay Proof

my-colex 1.4.2 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1809—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web scri

23RIESGO

abrir ↗

Referência✓ VexDay Proof

xoops module tinycontent 1.5 - Remote File Inclusion

CVE-2007-3237—webappsphp

PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS all

35RIESGO

abrir ↗

Referência✓ VexDay Proof

SLAED CMS 2.5 Lite - 'newlang' Local File Inclusion

CVE-2008-0458—webappsphp

Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

EntertainmentScript 1.4.0 - 'page.php' Local File Inclusion

CVE-2008-2459—webappsphp

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FubarForum 1.5 - 'index.php' Local File Inclusion

CVE-2008-2887—webappsphp

Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and exec

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.