Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.651exploits catalogados
39.246CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.347Exploit-DB 24.485GitHub PoC 16.174VulnCheck XDB 9644Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
PHPStore Complete Classifieds Script - Arbitrary File Upload
CVE-2008-6928—webappsphp
Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AGTC MyShop 3.2 - Insecure Cookie Handling
CVE-2009-1549—webappsphp
AGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative access setting the log_accep
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Kochsuite 0.9.4 - Remote File Inclusion
CVE-2006-4348—webappsphp
PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite (com_kochsuite) 0.9.4 component for Mam
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CCLeague Pro 1.2 - Insecure Cookie Authentication
CVE-2008-5123—webappsphp
SQL injection vulnerability in admin.php in CCleague Pro 1.2 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Empire CMS 3.7 - 'checklevel.php' Remote File Inclusion
CVE-2006-4354—webappsphp
PHP remote file inclusion vulnerability in e/class/CheckLevel.php in Phome Empire CMS 3.7 and earlier allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Jinzora 2.6 - '/extras/mt.php' Remote File Inclusion
CVE-2006-7131—webappsphp
PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MemHT Portal 4.0.1 - SQL Injection / Code Execution
CVE-2008-5132—webappsphp
SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP iCalendar 2.24 - Insecure Cookie Handling
CVE-2008-5840—webappsphp
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicale
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Integramod Portal 2.x - 'functions_portal.php' Remote File Inclusion
CVE-2006-4368—webappsphp
PHP remote file inclusion vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component com_tophotelmodule 1.0 - Blind SQL Injection
CVE-2008-5864—webappsphp
SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Alstrasoft e-Friends 4.85 - Remote Command Execution
CVE-2006-4913—webappsphp
Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to in
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component com_allhotels - Blind SQL Injection
CVE-2008-5874—webappsphp
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Wikepage Opus 10 < 2006.2a (lng) - Remote Command Execution
CVE-2006-4418—webappsphp
Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AlberT-EasySite 1.0a5 - 'PSA_PATH' Remote File Inclusion
CVE-2006-4426—webappsphp
PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite (AES)
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eFiction < 2.0.7 - Remote Admin Authentication Bypass
CVE-2006-4427—webappsphp
index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ay System CMS 2.6 - 'main.php' Remote File Inclusion
CVE-2006-4440—webappsphp
PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpGroupWare 0.9.16.010 - 'GLOBALS[]' Remote Code Execution
CVE-2006-4458—webappsphp
Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
W1L3D4 philboard 1.2 - Blind SQL Injection / Cross-Site Scripting
CVE-2008-5192—webappsphp
SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mediatheka 4.2 - Blind SQL Injection
CVE-2008-5895—webappsphp
SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Umer Inc Songs Portal Script - 'id' SQL Injection
CVE-2008-5921—webappsphp
SQL injection vulnerability in albums.php in Umer Inc Songs Portal allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EZContents CMS 2.0.3 - Multiple Local File Inclusions
CVE-2008-7055—webappsphp
module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MiniBill 1.22b - config[plugin_dir] Remote File Inclusion
CVE-2006-4489—webappsphp
Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbi
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Artmedic CMS 3.4 - 'index.php' Local File Inclusion
CVE-2007-5489—webappsphp
Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
isweb CMS 3.0 - SQL Injection / Cross-Site Scripting
CVE-2008-5934—webappsphp
SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AJ Article 1.0 - 'featured_article.php' SQL Injection
CVE-2008-5213—webappsphp
SQL injection vulnerability in featured_article.php in AJ Article 1.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BNCwi 1.04 - Local File Inclusion
CVE-2008-5948—webappsphp
Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Winamp 5.551 - MAKI Parsing Integer Overflow (PoC)
CVE-2009-1831—doswindows
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute
50RIESGO
abrir ↗
Referência✓ VexDay Proof
Pheap CMS 1.1 - 'lpref' Remote File Inclusion
CVE-2006-4531—webappsphp
PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Cisco Phone 7940 - Remote Denial of Service
CVE-2007-5583—doshardware
Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" response
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Chilkat Crypt - ActiveX Arbitrary File Creation/Execution
CVE-2008-5002—remotewindows
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilka
50RIESGO
abrir ↗
← anteriorpágina 29 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.