Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

21.554 exploits

Referência✓ VexDay Proof

BlogMe PHP 1.1 - 'comments.php' SQL Injection

CVE-2008-2175—webappsphp

SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-2180—webappsphp

Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to exe

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-2181—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbit

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection

CVE-2008-2191—webappsphp

SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

DeluxeBB 1.2 - Multiple Vulnerabilities

CVE-2008-2194—webappsphp

SQL injection vulnerability in forums.php in DeluxeBB 1.2 and earlier allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Miniweb 2.0 - 'historymonth' SQL Injection

CVE-2008-2197—webappsphp

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Project Based Calendaring System (PBCS) 0.7.1 - Multiple Vulnerabilities

CVE-2008-2216—webappsphp

Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows re

23RIESGO

abrir ↗

Referência✓ VexDay Proof

GameCMS Lite 1.0 - 'systemId' SQL Injection

CVE-2008-2225—webappsphp

SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - InternalOpenColorProfile Heap Overflow (PoC) (MS08-046)

CVE-2008-2245—doswindows

Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Manage

35RIESGO

abrir ↗

Referência✓ VexDay Proof

EMO Realty Manager - 'ida' SQL Injection

CVE-2008-2265—webappsphp

SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Kostenloses Linkmanagementscript - Remote File Inclusion

CVE-2008-2270—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

idautomation bar code - ActiveX Multiple Vulnerabilities

CVE-2008-2283—remotewindows

IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveEn

23RIESGO

abrir ↗

Referência

CVE-2008-2335

CVE-2008-2335—

Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attacke

23RIESGO

abrir ↗

Referência

CVE-2008-2335

CVE-2008-2335—

Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attacke

23RIESGO

abrir ↗

Referência

CVE-2008-2335

CVE-2008-2335—

Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attacke

23RIESGO

abrir ↗

Referência

CVE-2008-2335

CVE-2008-2335—

Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

68 Classifieds 4.0 - 'category.php' SQL Injection

CVE-2008-2336—webappsphp

SQL injection vulnerability in category.php in 68 Classifieds 4.0.1 allows remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência✓ VexDay Proof

IMGallery 2.5 - Multiple SQL Injections

CVE-2008-2337—webappsphp

Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote attackers to ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2340—webappsphp

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2341—webappsphp

PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MeltingIce File System 1.0 - Arbitrary Add User

CVE-2008-2348—webappsphp

MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Archangel Weblog 0.90.02 - 'post_id' SQL Injection

CVE-2008-2356—webappsphp

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

EntertainmentScript 1.4.0 - 'play.php' SQL Injection

CVE-2008-2393—webappsphp

SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

AlkalinePHP 0.80.00 Beta - 'thread.php' SQL Injection

CVE-2008-2395—webappsphp

SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FicHive 1.0 - 'category' Blind SQL Injection

CVE-2008-2416—webappsphp

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RIESGO

abrir ↗

Referência✓ VexDay Proof

How2ASP.net WebBoard 4.1 - SQL Injection

CVE-2008-2417—webappsphp

SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

The Real Estate Script - 'docID' SQL Injection

CVE-2008-2443—webappsphp

SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CaLogic Calendars 1.2.2 - 'langsel' SQL Injection

CVE-2008-2444—webappsphp

SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Web Group Communication Center (WGCC) 1.0.3 - SQL Injection

CVE-2008-2446—webappsphp

Multiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allow rem

23RIESGO

abrir ↗

Referência✓ VexDay Proof

e-107 Plugin ZoGo-Shop 1.16 Beta 13 - SQL Injection

CVE-2008-2447—webappsphp

SQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta 13 for e107 allows rem

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.