Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.446exploits catalogados

39.901CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.846Exploit-DB 24.487GitHub PoC 17.198VulnCheck XDB 9874Nuclei 4513Metasploit 3528✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

ZenPhoto 1.1.3 - 'rss.php?albumnr' SQL Injection

CVE-2007-6666—webappsphp

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MyPHP Forum 3.0 (Final) - Multiple SQL Injections

CVE-2007-6667—webappsphp

SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Webmin 1.962 - 'Package Updates' Escape Bypass RCE (Metasploit)

CVE-2020-35606—webappslinux

Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can ex

28RIESGO

abrir ↗

Referência✓ VexDay Proof

AlkalinePHP 0.80.00 Beta - 'thread.php' SQL Injection

CVE-2008-2395—webappsphp

SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FicHive 1.0 - 'category' Blind SQL Injection

CVE-2008-2416—webappsphp

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RIESGO

abrir ↗

Referência✓ VexDay Proof

emagiC CMS.Net 4.0 - 'emc.asp' SQL Injection

CVE-2007-5783—webappsasp

SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CaupoShop Pro 2.x - 'action' Remote File Inclusion

CVE-2007-5784—webappsphp

PHP remote file inclusion vulnerability in index.php in CaupoShop Pro 2.x allows remote attackers to execute arbitrary P

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Site@School 2.4.10 - Blind SQL Injection

CVE-2008-0129—webappsphp

SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Tribisur 2.0 - SQL Injection

CVE-2008-0133—webappsphp

Multiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência✓ VexDay Proof

1Book Guestbook Script 1.0.1 - Code Execution

CVE-2008-2638—webappsphp

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ZeroCMS 1.0 Alpha - Arbitrary File Upload / SQL Injection

CVE-2008-0232—webappsphp

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Softbiz Ad Management plus Script 1 - SQL Injection

CVE-2007-5998—webappsphp

SQL injection vulnerability in ads.php in Softbiz Ad Management plus Script 1 allows remote authenticated users to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

IceBB 1.0-rc6 - Remote Database Authentication Details

CVE-2007-6083—webappsphp

SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ZeroCMS 1.0 Alpha - Arbitrary File Upload / SQL Injection

CVE-2008-0233—webappsphp

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended acce

23RIESGO

abrir ↗

Referência✓ VexDay Proof

QuickTime Player 7.3.1.70 - 'RTSP' Buffer Overflow (PoC)

CVE-2008-0234—doswindows

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allo

28RIESGO

abrir ↗

Referência✓ VexDay Proof

ResearchGuide 0.5 - 'id' SQL Injection

CVE-2008-2964—webappsphp

SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

IAPR COMMENCE 1.3 - Multiple Remote File Inclusions

CVE-2007-6147—webappsphp

Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Toshiba Surveillance - 'MeIpCamX.dll 1.0.0.4' Remote Buffer Overflow

CVE-2008-0399—remotewindows

Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow r

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Invision Gallery 2.0.7 - SQL Injection

CVE-2008-0421—webappsphp

SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Liquid-Silver CMS 0.1 - 'update' Local File Inclusion

CVE-2008-0459—webappsphp

Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, allo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Bigware Shop 2.0 - 'pollid' SQL Injection

CVE-2008-0498—webappsphp

SQL injection vulnerability in main_bigware_53.tpl.php in Bigware Shop 2.0 allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Debian OpenSSH - (Authenticated) Remote SELinux Privilege Escalation

CVE-2008-3234—remotelinux

sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain ac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Plogger 3.0 - SQL Injection

CVE-2008-3563—webappsphp

Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL comman

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.11 - 'private.php' SQL Injection (1)

CVE-2008-0787—webappsphp

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Modules Okul 1.0 - 'okulid' SQL Injection

CVE-2008-0881—webappsphp

SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Globsy 1.0 - 'file' Remote File Disclosure

CVE-2008-0905—webappsphp

Directory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Home FTP Server 1.4.5 - Remote Denial of Service

CVE-2008-1478—doswindows

Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode conn

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Eurologon CMS - 'files.php' Arbitrary File Download

CVE-2007-6185—webappsphp

Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Quick TFTP Server Pro 2.1 - Remote Overflow (SEH)

CVE-2008-1610—remotewindows

Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service o

50RIESGO

abrir ↗

Referência✓ VexDay Proof

IP Reg 0.4 - Multiple SQL Injections

CVE-2008-4606—webappsphp

Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.