Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
CMtextS 1.0 - '/users_logins/admin.txt' Credentials Disclosure
CVE-2006-4897—webappsphp
CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, whic
23RIESGO
abrir ↗
Referência✓ VexDay Proof
guanxiCRM Business Solution 0.9.1 - Remote File Inclusion
CVE-2006-4898—webappsphp
PHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
more.groupware 0.74 - 'new_calendarid' SQL Injection
CVE-2006-4906—webappsphp
SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP DocWriter 0.3 - 'script' Remote File Inclusion
CVE-2006-4912—webappsphp
PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary PH
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Alstrasoft e-Friends 4.85 - Remote Command Execution
CVE-2006-4913—webappsphp
Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to in
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Tekman Portal 1.0 - 'tr' SQL Injection
CVE-2006-4916—webappsasp
SQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Simple Discussion Board 0.1.0 - Remote File Inclusion
CVE-2006-4918—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Site@School 2.4.02 - Arbitrary File Upload
CVE-2006-4922—webappsphp
Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and ear
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ProgSys 0.156 - 'RR.php' Remote File Inclusion
CVE-2006-4944—webappsphp
PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Digital WebShop 1.128 - Multiple Remote File Inclusions
CVE-2006-4945—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BCWB 0.99 - 'ROOT_PATH' Remote File Inclusion
CVE-2006-4946—webappsphp
PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MyReview 1.9.4 - 'email' SQL Injection / Code Execution
CVE-2006-4957—webappsphp
SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting / SQL Injection Code Execution
CVE-2006-4960—webappsphp
Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to injec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NaviCOPA Web Server 2.01 - 'GET' Remote Buffer Overflow
CVE-2006-5112—remotewindows
Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HT
50RIESGO
abrir ↗
Referência✓ VexDay Proof
KGB 1.87 - Local File Inclusion / Remote Code Execution
CVE-2006-5115—webappsphp
Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary loc
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpMyWebmin 1.0 - 'window.php' Remote File Inclusion
CVE-2006-5124—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PowerPortal 1.3a - 'index.php' Remote File Inclusion
CVE-2006-5126—webappsphp
PHP remote file inclusion vulnerability in index.php in John Himmelman (aka DaRk2k1) PowerPortal 1.3a allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VAMP Webmail 2.0beta1 - 'yesno.phtml' Remote File Inclusion
CVE-2006-5147—webappsphp
PHP remote file inclusion vulnerability in wamp_dir/setup/yesno.phtml in VAMP Webmail 2.0beta1 and earlier allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Forum82 < 2.5.2b - 'repertorylevel' Multiple File Inclusions
CVE-2006-5148—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VideoDB 2.2.1 - 'pdf.php' Remote File Inclusion
CVE-2006-5155—webappsphp
PHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Internet Explorer 6 - 'Content-Type' Stack Overflow Crash
CVE-2006-5162—doswindows
wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unh
35RIESGO
abrir ↗
Referência✓ VexDay Proof
BasiliX 1.1.1 - 'BSX_LIBDIR' Remote File Inclusion
CVE-2006-5167—webappsphp
Multiple PHP remote file inclusion vulnerabilities in BasiliX 1.1.1 and earlier allow remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpMyWebmin 1.0 - 'target' Remote File Inclusion
CVE-2006-5181—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Travelsized CMS 0.4 - 'FrontPage.php' Remote File Inclusion
CVE-2006-5182—webappsphp
PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BBaCE 3.5 - '/includes/functions.php' Remote File Inclusion
CVE-2006-5187—webappsphp
PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3.5 and earlier allows r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Klinza Professional CMS 5.0.1 - 'show_hlp.php' File Inclusion
CVE-2006-5189—webappsphp
PHP remote file inclusion vulnerability in funzioni/lib/show_hlp.php in klinza professional cms 5.0.1 and earlier allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Office 2003 - '.PPT' Local Buffer Overflow (PoC)
CVE-2006-5296—doswindows
PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record
28RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB SpamBlocker Mod 1.0.2 - Remote File Inclusion
CVE-2006-5301—webappsphp
PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for php
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Redaction System 1.0 - 'lang_prefix' Remote File Inclusion
CVE-2006-5302—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Prillian French Mod 0.8.0 - Remote File Inclusion
CVE-2006-5309—webappsphp
PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and e
23RIESGO
abrir ↗
← anteriorpágina 186 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.