Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados
34.508CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientespopularesriesgo
21.554 exploits
Referência✓ VexDay Proof
gf-3xplorer 2.4 - Cross-Site Scripting / Local File Inclusion
CVE-2007-6475—webappsphp
Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VHD Web Pack 2.0 - 'index.php' Local File Inclusion
CVE-2008-0609—webappsphp
Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joovili 3.0.6 - 'joovili.images.php' Remote File Disclosure
CVE-2007-6621—webappsphp
Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LightBlog 9.6 - 'Username' Local File Inclusion
CVE-2008-0840—webappsphp
Directory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to includ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
GNU/Gallery 1.1.1.0 - 'admin.php' Local File Inclusion
CVE-2008-2353—webappsphp
Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FOG Forum 0.8.1 - Multiple Local File Inclusions
CVE-2008-2993—webappsphp
Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and execu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)
CVE-2008-5072—doswindows
vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash)
23RIESGO
abrir ↗
Referência
CVE-2010-2916
CVE-2010-2916—
SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-2916
CVE-2010-2916—
SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-2919
CVE-2010-2919—
SQL injection vulnerability in the StaticXT (com_staticxt) component for Joomla! allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2022-29296
CVE-2022-29296—
A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attack
23RIESGO
abrir ↗
Referência
CVE-2022-29296
CVE-2022-29296—
A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attack
23RIESGO
abrir ↗
Referência
CVE-2010-2919
CVE-2010-2919—
SQL injection vulnerability in the StaticXT (com_staticxt) component for Joomla! allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2022-24223
CVE-2022-24223—
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.
50RIESGO
abrir ↗
Referência
CVE-2018-0966
CVE-2018-0966—
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security F
23RIESGO
abrir ↗
Referência
CVE-2021-24664
CVE-2021-24664—
WPSchoolPress < 2.1.17 - Multiple Admin+ Stored Cross-Site Scripting
23RIESGO
abrir ↗
Referência
CVE-2014-7153
CVE-2014-7153—
SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1.
23RIESGO
abrir ↗
Referência
CVE-2012-6043
CVE-2012-6043—
Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Lithium CMS 4.04c - '/classes/index.php' Local File Inclusion
CVE-2006-5731—webappsphp
Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to inclu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ourspace 2.0.9 - 'uploadmedia.cgi' Arbitrary File Upload
CVE-2007-4647—webappscgi
newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via uns
23RIESGO
abrir ↗
Referência✓ VexDay Proof
mBlog 1.2 - 'page' Remote File Disclosure
CVE-2007-6582—webappsphp
Directory traversal vulnerability in index.php in mBlog 1.2 allows remote attackers to read arbitrary files via a .. (do
23RIESGO
abrir ↗
Referência✓ VexDay Proof
artmedic weblog 1.0 - Multiple Local File Inclusions
CVE-2008-0798—webappsphp
Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
HIOX Banner Rotator 1.3 - 'hm' Remote File Inclusion
CVE-2008-3127—webappsphp
PHP remote file inclusion vulnerability in hioxBannerRotate.php in HIOX Banner Rotator (HBR) 1.3, when register_globals
23RIESGO
abrir ↗
Referência✓ VexDay Proof
moziloCMS 1.10.1 - 'download.php' Arbitrary Download File
CVE-2008-3589—webappsphp
Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TinyCMS 1.1.2 - 'templater.php' Local File Inclusion
CVE-2008-4740—webappsphp
Directory traversal vulnerability in templater.php in the ZZ_Templater module in TinyCMS 1.1.2, when register_globals is
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MemHT Portal 4.0.1 - SQL Injection / Code Execution
CVE-2008-5132—webappsphp
SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MyKtools 2.4 - 'langage' Local File Inclusion
CVE-2008-4781—webappsphp
Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
celerbb 0.0.2 - Multiple Vulnerabilities
CVE-2009-0853—webappsphp
login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obta
23RIESGO
abrir ↗
Referência
CVE-2010-1043
CVE-2010-1043—
Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary lo
23RIESGO
abrir ↗
Referência
CVE-2009-4957
CVE-2009-4957—
Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary file
23RIESGO
abrir ↗
← anteriorpágina 229 / 719siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.