Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

24.443 exploits

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - '/setup/base_conf_contents.php' Multiple Remote File Inclusions

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_payload.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_qry_alert.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_qry_common.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_alerts.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - 'index.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - '/help/base_setup_help.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_include.inc.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_db.inc.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_cache.inc.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_action.inc.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - '/admin/index.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - '/admin/base_useradmin.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_output_html.inc.php?base_path' Remote File Inclusion

CVE-2012-1199—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Nova CMS - '/administrator/modules/moduleslist.php?id' Remote File Inclusion

CVE-2012-1200—webappsphp11 feb 2012

Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote attackers to execute arbitrary PHP code via

23RIESGO

Exploit-DB✓ VexDay Proof

CubeCart 3.0.20 - 'switch.php?r' Arbitrary Site Redirect

CVE-2012-0865—webappsphp10 feb 2012

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitr

23RIESGO

Exploit-DB✓ VexDay Proof

CubeCart 3.0.20 - '/admin/login.php?goto' Arbitrary Site Redirect

CVE-2012-0865—webappsphp10 feb 2012

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitr

23RIESGO

Exploit-DB✓ VexDay Proof

CubeCart 3.0.20 - Multiple Script 'redir' Arbitrary Site Redirects

CVE-2012-0865—webappsphp10 feb 2012

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitr

23RIESGO

Exploit-DB✓ VexDay Proof

Adobe Flash Player - MP4 SequenceParameterSetNALUnit Buffer Overflow (Metasploit)

CVE-2011-2140—remotewindows10 feb 2012

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adob

60RIESGO

Exploit-DB✓ VexDay Proof

Zen Cart 1.3.9h - '/path_to_admin/product.php' Cross-Site Request Forgery

CVE-2011-4403—webappsphp10 feb 2012

Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authe

23RIESGO

Exploit-DB✓ VexDay Proof

Dolibarr ERP/CRM 3.2.0 < Alpha - File Inclusion

CVE-2012-1226—webappsphp10 feb 2012

Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files

43RIESGO

Exploit-DB✓ VexDay Proof

Dolibarr ERP/CRM 3.x - '/adherents/fiche.php' SQL Injection

CVE-2012-1225—webappsphp10 feb 2012

Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execu

23RIESGO

Exploit-DB✓ VexDay Proof

IBM solidDB 6.5.0.8 - 'SELECT' Statement 'WHERE' Condition Denial of Service

CVE-2012-0200—dosmultiple09 feb 2012

The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote aut

23RIESGO

Exploit-DB✓ VexDay Proof

Apache MyFaces - 'ln' Information Disclosure

CVE-2011-4367—remotemultiple09 feb 2012

Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.1

35RIESGO

Exploit-DB

Cyberoam Central Console 2.00.2 - Remote File Inclusion

CVE-2012-1047—webappsmultiple08 feb 2012

Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 a

23RIESGO

Exploit-DB✓ VexDay Proof

TORCS 1.3.2 - '.xml' File Buffer Overflow /SafeSEH Evasion

CVE-2012-1189—localwindows08 feb 2012

Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3

23RIESGO

Exploit-DB

Flyspray 0.9.9.6 - Cross-Site Request Forgery

CVE-2012-1058—webappsphp07 feb 2012

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication

23RIESGO

Exploit-DB✓ VexDay Proof

eFront 3.6.10 - 'administrator.php' Cross-Site Scripting

CVE-2012-1048—webappsphp07 feb 2012

Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10

23RIESGO

Exploit-DB✓ VexDay Proof

Simple Groupware 0.742 - 'export' Cross-Site Scripting

CVE-2012-1028—webappsphp07 feb 2012

Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allow

23RIESGO

Exploit-DB✓ VexDay Proof

ManageEngine ADManager Plus 5.2 Build 5210 - 'domainName' Cross-Site Scripting

CVE-2012-1049—webappsjava07 feb 2012

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers

23RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.