Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
PHPEasyData 1.5.4 - 'last_records.php?annuaire' Cross-Site Scripting
CVE-2008-2994—webappsphp11 jun 2008
Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPEasyData 1.5.4 - 'annuaire.php?annuaire' SQL Injection
CVE-2008-2995—webappsphp11 jun 2008
Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sun GlassFish 2.1 - 'name' Cross-Site Scripting
CVE-2008-5266—remotemultiple10 jun 2008
Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin inter
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Todd Woolums ASP News Management 2.2 - SQL Injection
CVE-2008-5274—webappsasp10 jun 2008
Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Tornado Knowledge Retrieval System 4.2 - 'p' Cross-Site Scripting
CVE-2008-5264—webappscgi10 jun 2008
Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BrowserCRM 5.002.00 - 'clients.php' Remote File Inclusion
CVE-2008-2690—webappsphp08 jun 2008
Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when register_globals is enabled, allow remot
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ALFTP FTP Client 4.1/5.0 - 'LIST' Directory Traversal
CVE-2008-2702—remotelinux06 jun 2008
Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP server
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
F5 FirePass 6.0.2.3 - '/vdesk/admincon/webyfiers.php?css_exceptions' Cross-Site Scripting
CVE-2008-2637—remotehardware05 jun 2008
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
F5 FirePass 6.0.2.3 - '/vdesk/admincon/index.php?sql_matchscope' Cross-Site Scripting
CVE-2008-2637—remotehardware05 jun 2008
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Address Book 3.1.5 - SQL Injection / Cross-Site Scripting
CVE-2013-1748—webappsphp04 jun 2008
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
NASA Ames Research Center BigView 1.8 - '.PNM' Stack Buffer Overflow (PoC)
CVE-2008-2542—dosmultiple04 jun 2008
Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-as
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll RegistryString' Buffer Overflow
CVE-2007-5607—doswindows04 jun 2008
Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP StorageWorks - NSI Double Take Remote Overflow (Metasploit)
CVE-2008-1661—remotewindows04 jun 2008
Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote a
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6675—webappsphp03 jun 2008
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation
CVE-2008-0952—doswindows03 jun 2008
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant S
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JooBlog 0.1.1 - Blind SQL Injection
CVE-2008-5051—webappsphp03 jun 2008
SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6678—webappsphp03 jun 2008
SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Delete
CVE-2007-5610—doswindows03 jun 2008
The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Sup
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6674—webappsphp03 jun 2008
mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of r
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6673—webappsphp03 jun 2008
asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll ExtractCab' ActiveX Control Buffer Overflow
CVE-2007-5604—remotewindows03 jun 2008
Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in H
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6677—webappsphp03 jun 2008
Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
CVE-2008-6676—webappsphp03 jun 2008
QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any pa
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll StartApp' ActiveX Control Insecure Method
CVE-2008-0953—doswindows03 jun 2008
The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alt-N MDaemon 9.6.5 - Multiple Remote Buffer Overflows (PoC)
CVE-2008-2631—doswindows02 jun 2008
The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samba 3.0.29 (Client) - 'receive_smb_raw()' Buffer Overflow (PoC)
CVE-2008-4189—dosmultiple01 jun 2008
20RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Social Site Generator 2.0 - 'sgc_id' SQL Injection
CVE-2008-6421—webappsphp31 may 2008
PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Social Site Generator 2.0 - 'sgc_id' SQL Injection
CVE-2008-6420—webappsphp31 may 2008
Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TorrentTrader Classic 1.x - 'scrape.php' SQL Injection
CVE-2008-6418—webappsphp31 may 2008
SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DotNetNuke 4.8.3 - 'Default.aspx' Cross-Site Scripting
CVE-2008-6644—webappsasp30 may 2008
Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inje
23RIESGO
abrir ↗
← anteriorpágina 304 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.