Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.445exploits catalogados

34.432CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8198Nuclei 4217Metasploit 3463✓ solo verificadosrecientes populares riesgo

21.497 exploits

Referência✓ VexDay Proof

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

CVE-2007-1596—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mambo

23RIESGO

abrir ↗

Referência

CVE-2016-5840

CVE-2016-5840—

hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote ad

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpMyPortal 3.0.0 RC3 - GLOBALS[CHEMINMODULES] Remote File Inclusion

CVE-2007-2594—webappsphp

PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to exec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP 'Perl' Extension - 'Safe_mode' Bypass

CVE-2007-4596—localwindows

The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute ar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Charrays CMS 0.9.3 - Multiple Remote File Inclusions

CVE-2007-6179—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PH

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Maian Links 3.1 - Insecure Cookie Handling

CVE-2008-3319—webappsphp

admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Dokuwiki 2009-02-14 - Local File Inclusion

CVE-2009-1960—webappsphp

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote att

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Maian Uploader 4.0 - Insecure Cookie Handling

CVE-2008-3321—webappsphp

admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrati

23RIESGO

abrir ↗

Referência

CVE-2014-5084

CVE-2014-5084—

A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let

23RIESGO

abrir ↗

Referência

CVE-2012-4889

CVE-2012-4889—

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inje

38RIESGO

abrir ↗

Referência

CVE-2009-5134

CVE-2009-5134—

Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions

23RIESGO

abrir ↗

Referência

CVE-2017-0245

CVE-2017-0245—

The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local

23RIESGO

abrir ↗

Referência

CVE-2021-21551

CVE-2021-21551HIGHbajo ataque

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

98RIESGO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities

CVE-2006-5773—webappsphp

Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrar

23RIESGO

abrir ↗

Referência

CVE-2020-14946

CVE-2020-14946—

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and e

23RIESGO

abrir ↗

Referência

CVE-2020-12351

CVE-2020-12351—

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting

CVE-2007-3446—webappsphp

BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers t

23RIESGO

abrir ↗

Referência

CVE-2017-0569

CVE-2017-0569—

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execu

23RIESGO

abrir ↗

Referência

CVE-2021-44665

CVE-2021-44665—

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via

23RIESGO

abrir ↗

Referência

CVE-2023-34634

CVE-2023-34634—

Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .green

38RIESGO

abrir ↗

Referência

CVE-2023-34634

CVE-2023-34634—

Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .green

38RIESGO

abrir ↗

Referência

CVE-2006-4842

CVE-2006-4842—

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment v

38RIESGO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Wp-FileManager 1.2 - Arbitrary File Upload

CVE-2008-0222—webappsphp

Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Titan FTP Server 6.03 - 'USER/PASS' Remote Heap Overflow (PoC)

CVE-2008-0702—doswindows

Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of

38RIESGO

abrir ↗

Referência✓ VexDay Proof

Panda Security ActiveScan 2.0 (Update) - Remote Buffer Overflow

CVE-2008-3155—remotewindows

Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attac

23RIESGO

abrir ↗

Referência

Virtual Reception v1.0 - Web Server Directory Traversal

CVE-2023-25289HIGHwebappsmultiple

Directory Traversal vulnerability in virtualreception Digital Receptie version win7sp1_rtm.101119-1850 6.1.7601.1.0.6579

41RIESGO

abrir ↗

Referência

CVE-2015-2432

CVE-2015-2432—

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,

35RIESGO

abrir ↗

Referência

CVE-2015-6750

CVE-2015-6750—

Buffer overflow in Ricoh DL FTP Server 1.1.0.6 and earlier allows remote attackers to execute arbitrary code via a long

23RIESGO

abrir ↗

Referência

CVE-2014-3740

CVE-2014-3740—

Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arbi

23RIESGO

abrir ↗

Referência

CVE-2018-9233

CVE-2018-9233—

Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Vir

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.