Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
5629 exploits
ReferênciaVexDay Proof
Hpecs Shopping Cart - Remote Authentication Bypass
CVE-2006-5962webappsasp
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir
ReferênciaVexDay Proof
Powies pForum 1.29a - 'editpoll.php' SQL Injection
CVE-2006-6038webappsphp
SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to e
23RIESGO
abrir
ReferênciaVexDay Proof
WORK System E-Commerce 3.0.1 - Remote File Inclusion
CVE-2006-6041webappsphp
Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other ver
23RIESGO
abrir
ReferênciaVexDay Proof
PHPWebThings 1.5.2 - 'editor.php' Remote File Inclusion
CVE-2006-6042webappsphp
PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is e
23RIESGO
abrir
ReferênciaVexDay Proof
Etomite CMS 0.6.1.2 - '/manager/index.php' Local File Inclusion
CVE-2006-6047webappsphp
Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to
23RIESGO
abrir
ReferênciaVexDay Proof
Joomla! Component MosReporter 0.9.3 - Remote File Inclusion
CVE-2006-6051webappsphp
PHP remote file inclusion vulnerability in reporter.logic.php in the MosReporter (com_reporter) component for Mambo and
23RIESGO
abrir
ReferênciaVexDay Proof
XMPlay 3.3.0.4 - '.M3U' Filename Local Buffer Overflow
CVE-2006-6063localwindows
Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via
50RIESGO
abrir
ReferênciaVexDay Proof
e-Ark 1.0 - '/src/ark_inc.php' Remote File Inclusion
CVE-2006-6086webappsphp
PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP
23RIESGO
abrir
ReferênciaVexDay Proof
Photo Cart 3.9 - 'adminprint.php' Remote File Inclusion
CVE-2006-6093webappsphp
Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attacker
23RIESGO
abrir
ReferênciaVexDay Proof
FipsCMS 4.5 - 'index.asp' SQL Injection
CVE-2006-6115webappsasp
SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir
ReferênciaVexDay Proof
fipsForum 2.6 - 'default2.asp' SQL Injection
CVE-2006-6116webappsasp
SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir
ReferênciaVexDay Proof
fipsGallery 1.5 - 'index1.asp' SQL Injection
CVE-2006-6117webappsasp
SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir
ReferênciaVexDay Proof
Sisfo Kampus 0.8 - Remote File Inclusion / Download
CVE-2006-6137webappsphp
Multiple PHP remote file inclusion vulnerabilities in Sisfo Kampus 0.8 allow remote attackers to execute arbitrary PHP c
23RIESGO
abrir
ReferênciaVexDay Proof
Sisfo Kampus 0.8 - Remote File Inclusion / Download
CVE-2006-6138webappsphp
Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary director
23RIESGO
abrir
ReferênciaVexDay Proof
JiRos FAQ Manager 1.0 - 'index.asp' SQL Injection
CVE-2006-6149webappsphp
SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir
ReferênciaVexDay Proof
Liberum Help Desk 0.97.3 - SQL Injection
CVE-2006-6160webappsasp
SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers to
23RIESGO
abrir
ReferênciaVexDay Proof
SimpleBlog 2.3 - '/admin/edit.asp' SQL Injection
CVE-2006-6191webappsasp
SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execut
23RIESGO
abrir
ReferênciaVexDay Proof
BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow
CVE-2006-6396localwindows
Stack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote attackers to execute arbi
23RIESGO
abrir
ReferênciaVexDay Proof
VMware 5.5.1 - 'ActiveX' Local Buffer Overflow
CVE-2006-6410localwindows
Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb par
23RIESGO
abrir
anteriorpágina 188 / 188

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.