Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

21.662 exploits

Referência

CVE-2010-2917

CVE-2010-2917—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to i

23RIESGO

abrir ↗

Referência

CVE-2017-5881

CVE-2017-5881—

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspeci

23RIESGO

abrir ↗

Referência

CVE-2010-1478

CVE-2010-1478—

Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allow

38RIESGO

abrir ↗

Referência

CVE-2010-1473

CVE-2010-1473—

Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attacker

38RIESGO

abrir ↗

Referência

CVE-2010-1473

CVE-2010-1473—

Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attacker

38RIESGO

abrir ↗

Referência✓ VexDay Proof

Songbird Media Player 0.2 - Format String Denial of Service (PoC)

CVE-2006-6250—doswindows

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of servic

23RIESGO

abrir ↗

Referência✓ VexDay Proof

X10media Mp3 Search Engine 1.5.5 - Remote File Inclusion

CVE-2008-4141—webappsphp

Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

CVE-2008-4206—webappsphp

PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

The Gemini Portal 4.7 - 'lang' Remote File Inclusion

CVE-2008-4720—webappsphp

Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ClamAV < 0.94.2 - JPEG Parsing Recursive Stack Overflow (PoC)

CVE-2008-5314—dosmultiple

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Arab Portal 2.1 (Windows) - Remote File Disclosure

CVE-2008-5787—webappsphp

Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary fil

23RIESGO

abrir ↗

Referência

CVE-2017-17870

CVE-2017-17870—

The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.

23RIESGO

abrir ↗

Referência

CVE-2018-6363

CVE-2018-6363—

SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.

23RIESGO

abrir ↗

Referência

CVE-2018-6363

CVE-2018-6363—

SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.

23RIESGO

abrir ↗

Referência

CVE-2017-9614

CVE-2017-9614—

The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service

23RIESGO

abrir ↗

Referência

CVE-2017-9614

CVE-2017-9614—

The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service

23RIESGO

abrir ↗

Referência

CVE-2010-1711

CVE-2010-1711—

Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows r

23RIESGO

abrir ↗

Referência

CVE-2010-1711

CVE-2010-1711—

Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows r

23RIESGO

abrir ↗

Referência

CVE-2019-0570

CVE-2019-0570—

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windo

23RIESGO

abrir ↗

Referência

CVE-2010-2154

CVE-2010-2154—

Cross-site scripting (XSS) vulnerability in the Search Site in CMScout 2.09, and possibly other versions, allows remote

23RIESGO

abrir ↗

Referência

CVE-2009-2923

CVE-2009-2923—

Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files

23RIESGO

abrir ↗

Referência

CVE-2012-5387

CVE-2012-5387—

Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordP

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - '/index.php' Local/Remote File Inclusion

CVE-2007-0987—webappsphp

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbit

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Link Request Contact Form 3.4 - Remote Code Execution

CVE-2007-3199—webappsphp

Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.1 - 'substr_compare()' Information Leak

CVE-2007-1375—localmultiple

Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sens

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Simple Machines Forum (SMF) 1.1.3 - Blind SQL Injection

CVE-2007-5646—webappsphp

SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows rem

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PowerPHPBoard 1.00b - Multiple Local File Inclusions

CVE-2008-1534—webappsphp

Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ITechBids 7.0 gold - Cross-Site Scripting / SQL Injection

CVE-2008-3237—webappsphp

Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to injec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

easysite 2.3 - Multiple Vulnerabilities

CVE-2008-4155—webappsphp

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list dire

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PowerPortal 2.0.13 - 'path' Local Directory Traversal

CVE-2008-4361—webappsphp

Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary file

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.