Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
Devalcms 1.4a - 'currentfile' Local File Inclusion
CVE-2008-2913—webappsphp
Directory traversal vulnerability in func.php in Devalcms 1.4a, when magic_quotes_gpc is disabled, allows remote attacke
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Crux Gallery 1.32 - 'theme' Local File Inclusion
CVE-2008-4483—webappsphp
Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magic_quotes_gpc is disabled, allo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LnBlog 0.9.0 - 'plugin' Local File Inclusion
CVE-2008-4712—webappsphp
Directory traversal vulnerability in pages/showblog.php in LnBlog 0.9.0 and earlier, when magic_quotes_gpc is disabled,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LightBlog 9.8 - 'GET' / 'POST' / 'COOKIE' Local File Inclusion
CVE-2008-6177—webappsphp
Multiple directory traversal vulnerabilities in LightBlog 9.8, when magic_quotes_gpc is disabled, allow remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TBmnetCMS 1.0 - Local File Inclusion
CVE-2008-6271—webappsphp
Directory traversal vulnerability in index.php in TBmnetCMS 1.0, when magic_quotes_gpc is disabled, allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AdaptBB 1.0 - 'forumspath' Remote File Inclusion
CVE-2009-1946—webappsphp
PHP remote file inclusion vulnerability in latestposts.php in AdaptBB 1.0, when register_globals is enabled, allows remo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
1024 CMS 1.3.1 - Local File Inclusion / SQL Injection
CVE-2007-6583—webappsphp
SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NuStore 1.0 - 'Products.asp' SQL Injection
CVE-2006-5885—webappsasp
SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TinXCMS 1.1 - Local File Inclusion / Cross-Site Scripting
CVE-2008-2976—webappsphp
Multiple directory traversal vulnerabilities in TinX/cms 1.1, when register_globals is enabled, allow remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
cmreams CMS 1.3.1.1 beta2 - Local File Inclusion / Cross-Site Scripting
CVE-2008-2985—webappsphp
Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled,
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component MailTo - 'article' SQL Injection
CVE-2009-1499—webappsphp
SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DomPHP 0.81 - 'index.php' Remote File Inclusion
CVE-2008-0283—webappsphp
PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection
CVE-2007-2901—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.0 and earlier allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
polypager 1.0rc2 - SQL Injection / Cross-Site Scripting
CVE-2008-3506—webappsphp
SQL injection vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LoveCMS 1.6.2 Final - Update Settings
CVE-2008-3509—webappsphp
LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TotalCalendar 2.402 - 'view_event.php' SQL Injection
CVE-2007-3515—webappsphp
SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
vcart 3.3.2 - Multiple Remote File Inclusions
CVE-2008-0287—webappsphp
PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SazCart 1.5.1 - Multiple Remote File Inclusions
CVE-2008-2224—webappsphp
Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when register_globals is enabled, allow remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
acFTP FTP Server 1.5 - 'REST/PBSZ' Remote Denial of Service
CVE-2006-6775—doswindows
acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) P
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IceBB 1.0-rc5 - Remote Code Execution
CVE-2007-1725—webappsphp
SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IceBB 1.0-rc5 - Remote Create Admin
CVE-2007-1725—webappsphp
SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Bitweaver 2.8.1 - Multiple Vulnerabilities
CVE-2012-5193—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Collabtive 0.4.8 - Cross-Site Scripting / Authentication Bypass / Arbitrary File Upload
CVE-2008-6949—webappsphp
Multiple cross-site request forgery (CSRF) vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the auth
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sabdrimer PRO 2.2.4 - 'pluginpath' Remote File Inclusion
CVE-2006-3520—webappsphp
PHP remote file inclusion vulnerability in skins/advanced/advanced1.php in Sabdrimer Pro 2.2.4, when register_globals is
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Podcast Generator 1.1 - Remote Code Execution
CVE-2009-1230—webappsphp
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated admini
23RIESGO
abrir ↗
Referência✓ VexDay Proof
GPS CMS 1.2 - 'print.asp' SQL Injection
CVE-2007-0554—webappsasp
SQL injection vulnerability in print.asp in Guo Xu Guos Posting System (GPS) 1.2 allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPDirector 0.21 - 'videos.php?id' SQL Injection
CVE-2007-3562—webappsphp
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Constructr CMS 3.02.5 stable - Multiple Vulnerabilities
CVE-2008-5847—webappsphp
Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Blog:CMS 4.2.1b - SQL Injection / Cross-Site Scripting
CVE-2008-0359—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Referência✓ VexDay Proof
E-Store Kit-1 < 2 PayPal Edition - 'pid' SQL Injection
CVE-2008-3594—webappsphp
SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Ed
23RIESGO
abrir ↗
← anteriorpágina 164 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.