Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.900exploits catalogados
36.847CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8946Nuclei 4390Metasploit 3501✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Z1Exchange 1.0 - 'id' Cross-Site Scripting
CVE-2008-6386—webappsphp02 dic 2008
Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Jbook - SQL Injection
CVE-2008-6391—webappsasp02 dic 2008
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the usern
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Orkut Clone - 'profile_social.php?id' Cross-Site Scripting
CVE-2008-5971—webappsphp02 dic 2008
Cross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Fantastico - 'index.php' Local File Inclusion
CVE-2008-6843—webappsphp02 dic 2008
Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Orkut Clone - 'profile_social.php?id' SQL Injection
CVE-2008-5970—webappsphp02 dic 2008
SQL injection vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Jbook - SQL Injection
CVE-2008-6376—webappsasp02 dic 2008
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the passw
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - '/admin/adminhome.php?msg' Cross-Site Scripting
CVE-2008-6325—webappsphp01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASP Forum Script - 'messages.asp?forum_id' Cross-Site Scripting
CVE-2008-6891—webappsasp01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Octeth Oempro 3.5.5 - Multiple SQL Injections
CVE-2008-3058—webappsphp01 dic 2008
Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote atta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
CodeToad ASP Shopping Cart Script - Cross-Site Scripting
CVE-2008-6500—webappsasp01 dic 2008
Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - '/advertisers/signinform.php?msg' Cross-Site Scripting
CVE-2008-6325—webappsphp01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASP Forum Script - 'new_message.asp?forum_id' Cross-Site Scripting
CVE-2008-6891—webappsphp01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP JOBWEBSITE PRO - 'forgot.php' Cross-Site Scripting
CVE-2008-5976—webappsphp01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
E.Z. Poll 2 - Authentication Bypass
CVE-2008-3590—webappsphp01 dic 2008
Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - 'showcategory.php?radio' Cross-Site Scripting
CVE-2008-6325—webappsphp01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - '/admin/index.php?msg' Cross-Site Scripting
CVE-2008-6325—webappsphp01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASP Forum Script - 'messages.asp?message_id' SQL Injection
CVE-2008-6890—webappsasp01 dic 2008
SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - 'gallery.php?radio' Cross-Site Scripting
CVE-2008-6325—webappsphp01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Rational ClearCase 7/8 - Cross-Site Scripting
CVE-2008-5330—webappsmultiple01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCa
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP JOBWEBSITE PRO - 'adname' SQL Injection
CVE-2008-5977—webappsphp01 dic 2008
SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - 'lostpassword.php?msg' Cross-Site Scripting
CVE-2008-6325—webappsphp01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pre Classified Listings 1.0 - 'detailad.asp' SQL Injection
CVE-2008-6887—webappsasp01 dic 2008
SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pre Classified Listings 1.0 - 'signup.asp' Cross-Site Scripting
CVE-2008-6888—webappsasp01 dic 2008
Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pre ASP Job Board - 'emp_login.asp' Cross-Site Scripting
CVE-2008-6847—webappsasp01 dic 2008
Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to injec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASP Forum Script - 'default.asp' Query String Cross-Site Scripting
CVE-2008-6891—webappsasp01 dic 2008
Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Active Price Comparison 4 - 'ProductID' Blind SQL Injection
CVE-2008-5638—webappsphp30 nov 2008
Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
KTP Computer Customer Database CMS 1.0 - Blind SQL Injection
CVE-2008-5954—webappsphp30 nov 2008
SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Active Price Comparison 4 - 'ProductID' Blind SQL Injection
CVE-2008-5975—webappsphp30 nov 2008
SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Active Web Mail 4 - Authentication Bypass
CVE-2008-5974—webappsasp29 nov 2008
Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Active Force Matrix 2 - Authentication Bypass
CVE-2008-5632—webappsasp29 nov 2008
SQL injection vulnerability in Account.asp in Active Time Billing 3.2 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
← anteriorpágina 283 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.