Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.230exploits catalogados

36.424CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

YourFreeWorld Classifieds - 'category' SQL Injection

CVE-2008-3755—webappsphp

SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

vbLOGIX Tutorial Script 1.0 - 'cat_id' SQL Injection

CVE-2008-4350—webappsphp

SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute ar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ParsaWeb CMS - 'Search' SQL Injection

CVE-2008-4364—webappsasp

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin lyrics_menu - 'l_id' SQL Injection

CVE-2008-4906—webappsphp

SQL injection vulnerability in lyrics_song.php in the Lyrics (lyrics_menu) plugin 0.42 for e107 allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.1 - 'id' SQL Injection

CVE-2008-6311—webappsphp

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Chipmunk Blog - (Authentication Bypass) Add Admin

CVE-2009-0403—webappsphp

SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting

CVE-2007-3447—webappsphp

SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Blog System 1.x - 'index.php?news_id' SQL Injection

CVE-2007-3979—webappsphp

SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TinyWebGallery 1.5 - 'image' Remote File Inclusion

CVE-2006-4166—webappsphp

PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary P

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component musepoes - 'aid' SQL Injection

CVE-2008-0579—webappsphp

SQL injection vulnerability in index.php in the buslicense (com_buslicense) component for Joomla! allows remote attacker

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Masir Camp E-Shop Module 3.0 - 'ordercode' SQL Injection

CVE-2008-3955—webappsphp

SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Downline Goldmine newdownlinebuilder - SQL Injection

CVE-2008-4178—webappsphp

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Downline Goldmine paidversion - SQL Injection

CVE-2008-4178—webappsphp

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Creator CMS 5.0 - 'sideid' SQL Injection

CVE-2008-4377—webappsasp

SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Open Auto Classifieds 1.4.3b - SQL Injection

CVE-2008-6656—webappsphp

Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

AJchat 0.10 - 'unse' SQL Injection

CVE-2008-7210—webappsphp

directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

AuthPhp 1.0 - Authentication Bypass

CVE-2009-0738—webappsphp

SQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute arbitrary SQL commands via t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component D4JeZine 2.8 - Blind SQL Injection

CVE-2007-1776—webappsphp

SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine (com_ezine) 2.8 and earlier component for

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpDirectorySource 1.1 - Multiple SQL Injections

CVE-2008-2177—webappsphp

Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote att

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SazCart 1.5.1 - 'prodid' SQL Injection

CVE-2008-2411—webappsphp

SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Article Friendly Pro/Standard - SQL Injection

CVE-2008-3649—webappsphp

SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (PoC)

CVE-2008-4193—doswindows

Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t

60RIESGO

abrir ↗

Referência✓ VexDay Proof

CzarNews 1.20 - 'cookie' SQL Injection

CVE-2008-4203—webappsphp

SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Pardal CMS 0.2.0 - Blind SQL Injection

CVE-2009-0279—webappsphp

SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Director 0.21 - Remote Command Execution

CVE-2009-0604—webappsphp

SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

EZ-Blog Beta2 - 'category' SQL Injection

CVE-2009-1626—webappsphp

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled,

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_gsticketsystem - 'catid' Blind SQL Injection

CVE-2009-1736—webappsphp

SQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component for Joomla! allows remo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BP Blog 7.0 - 'layout' SQL Injection

CVE-2007-1445—webappsasp

SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Prozilla Hosting Index - 'cat_id' SQL Injection

CVE-2008-2083—webappsphp

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation

CVE-2008-4190—locallinux

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitr

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.