Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
icblogger 2.0 - 'YID' SQL Injection
CVE-2006-4597—webappsasp
SQL injection vulnerability in devam.asp in ICBlogger 2.0 and earlier allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ProActive CMS - 'template' Local File Inclusion
CVE-2008-4187—webappsphp
Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities
CVE-2006-5772—webappsphp
Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote attackers to execute a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component RD-Autos 1.5.5 - SQL Injection
CVE-2009-0420—webappsphp
SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPMesFilms 1.0 - 'index.php?id' SQL Injection
CVE-2009-0598—webappsphp
SQL injection vulnerability in index.php in PhpMesFilms 1.0 and 1.8 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
vidshare pro - SQL Injection / Cross-Site Scripting
CVE-2009-1734—webappsphp
SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência✓ VexDay Proof
kubix 0.7 - Multiple Vulnerabilities
CVE-2006-7116—webappsphp
SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Homepage M 1.0 - 'galerie.php' SQL Injection
CVE-2007-5308—webappsphp
SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Unreal Tournament 3 1.3 - Directory Traversal
CVE-2008-4243—remotewindows
Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tourna
23RIESGO
abrir ↗
Referência✓ VexDay Proof
vbzoom 1.x - 'forum.php?MainID' SQL Injection
CVE-2006-3142—webappsphp
SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Munch Pro 1.0 - 'switch.asp' SQL Injection
CVE-2006-5880—webappsasp
SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
UPublisher 1.0 - 'viewarticle.asp' SQL Injection
CVE-2006-5888—webappsasp
SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Relative Real Estate Systems 3.0 - 'listing_id' SQL Injection
CVE-2008-3185—webappsphp
SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection
CVE-2006-4210—webappsphp
nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to us
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBP RC3 (2.204) - SQL Injection / Remote Code Execution
CVE-2007-0370—webappsphp
Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to inj
23RIESGO
abrir ↗
Referência✓ VexDay Proof
alitalk 1.9.1.1 - Multiple Vulnerabilities
CVE-2008-0371—webappsphp
Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated
23RIESGO
abrir ↗
Referência✓ VexDay Proof
X7 Chat 2.0.4 - 'old_prefix' Blind SQL Injection
CVE-2006-3851—webappsphp
SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SmartBlog 1.3 - 'index.php' SQL Injection
CVE-2008-2183—webappsphp
SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Link Trader - 'lnkid' SQL Injection
CVE-2008-6102—webappsphp
SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência✓ VexDay Proof
iScripts Socialware - 'id' SQL Injection
CVE-2008-1790—webappsphp
Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IRSR 0.2 - '_sysSessionPath' Remote File Inclusion
CVE-2006-4237—webappsphp
PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Windows Server - Universal Code Execution (MS08-067)
CVE-2008-4250CRITICALbajo ataqueremotewindows
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Windows Server 2000/2003 - Code Execution (MS08-067)
CVE-2008-4250CRITICALbajo ataqueremotewindows
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RIESGO
abrir ↗
Referência✓ VexDay Proof
ECShop 2.5.0 - 'order_sn' SQL Injection
CVE-2009-1622—webappsphp
SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WGCC 0.5.6b - 'quiz.php' SQL Injection
CVE-2006-5514—webappsphp
SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPMyRing 4.2.1 - 'cherche.php' SQL Injection
CVE-2006-5638—webappsphp
Multiple SQL injection vulnerabilities in cherche.php in PHPMyRing 4.2.1 and earlier allow remote attackers to execute a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EfesTECH Haber 5.0 - 'id' SQL Injection
CVE-2007-2662—webappsphp
SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id p
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Photocart 3.9 - Multiple SQL Injections
CVE-2008-3788—webappsphp
Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote at
23RIESGO
abrir ↗
Referência✓ VexDay Proof
D2-Shoutbox 4.2 IPB Mod - 'load' SQL Injection
CVE-2006-1153—webappsphp
SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load pa
23RIESGO
abrir ↗
Referência✓ VexDay Proof
E-Smart Cart 1.0 - 'Product_ID' SQL Injection
CVE-2007-0092—webappsasp
SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
← anteriorpágina 171 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.