Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
Joomla! Component Datsogallery 1.6 - Blind SQL Injection
CVE-2008-5208—webappsphp
SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows remo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ocean12 Membership Manager Pro - Authentication Bypass
CVE-2008-6371—webappsphp
SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Webhosting - 'catid' Blind SQL Injection
CVE-2008-6653—webappsphp
SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Joo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BrewBlogger 2.1.0.1 - Arbitrary Add Admin
CVE-2008-6911—webappsphp
SQL injection vulnerability in the authenticateUser function in includes/authentication.inc.php in BrewBlogger (BB) 2.1.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
cwmCounter 5.1.1 - 'statistic.php' Remote File Inclusion
CVE-2006-6738—webappsphp
PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IMGallery 2.5 - Create Uploader Script
CVE-2007-0082—webappsphp
users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MGB 0.5.4.5 - 'email.php?id' SQL Injection
CVE-2007-0354—webappsphp
SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Webyapar 2.0 - Multiple SQL Injections
CVE-2007-4068—webappsphp
Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1)
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Siteframe CMS 3.2.3 - 'folder.php' SQL Injection
CVE-2008-3256—webappsphp
SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
HIOX Browser Statistics 2.0 - Remote File Inclusion
CVE-2008-3402—webappsphp
Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics (HBS) 2.0 allow remote attackers to execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
clickandemail - SQL Injection / Cross-Site Scripting
CVE-2008-5893—webappsasp
Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Simple Machines Forum (SMF) 1.1.6 - Code Execution
CVE-2008-6658—webappsphp
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 all
23RIESGO
abrir ↗
Referência✓ VexDay Proof
actSite 1.991 Beta - 'base.php' Remote File Inclusion
CVE-2007-5175—webappsphp
PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FlexPHPDirectory 0.0.1 - Authentication Bypass
CVE-2008-6749—webappsphp
Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disabl
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Gradman 0.1.3 - 'info.php' Local File Inclusion
CVE-2008-0393—webappsphp
Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CoolPlayer 2.18 - '.m3u' File Local Buffer Overflow
CVE-2008-3408—localwindows
Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ourvideo CMS 9.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
CVE-2008-2978—webappsphp
Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when register_globals is enabled, allows remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Wsn (Multiple Products) - Local File Inclusion / Code Execution
CVE-2008-3555—webappsphp
Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3)
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Rianxosencabos CMS 0.9 - Arbitrary Add Admin
CVE-2008-4245—webappsphp
The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authent
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eDNews 2.0 - Local File Inclusion
CVE-2008-5819—webappsphp
Directory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when magic_quotes_gpc is disabled, allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
emergecolab 1.0 - 'sitecode' Local File Inclusion
CVE-2008-5990—webappsphp
Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
kubix 0.7 - Multiple Vulnerabilities
CVE-2006-7117—webappsphp
Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SLAED CMS 2.5 Lite - 'newlang' Local File Inclusion
CVE-2008-0458—webappsphp
Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EntertainmentScript 1.4.0 - 'page.php' Local File Inclusion
CVE-2008-2459—webappsphp
Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FubarForum 1.5 - 'index.php' Local File Inclusion
CVE-2008-2887—webappsphp
Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Minishowcase 09b136 - 'lang' Local File Inclusion
CVE-2008-3390—webappsphp
Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when register_glob
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EPShop < 3.0 - 'pid' SQL Injection
CVE-2008-3412—webappsphp
SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Kure 0.6.3 - 'index.php' Local File Inclusion
CVE-2008-4632—webappsphp
Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
nicLOR Sito - includefile Local File Inclusion
CVE-2008-6290—webappsphp
Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_gp
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Liquid-Silver CMS 0.1 - 'update' Local File Inclusion
CVE-2008-0459—webappsphp
Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, allo
23RIESGO
abrir ↗
← anteriorpágina 163 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.