Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.980exploits catalogados
36.899CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8959Nuclei 4393Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
ScrewTurn Software ScrewTurn Wiki 2.0.x - 'System Log' Page HTML Injection
CVE-2008-3483—webappsphp11 may 2008
Cross-site scripting (XSS) vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BlogPHP 2.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-6631—webappsphp10 may 2008
Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Ktools Photostore 3.5.2 - Multiple SQL Injections
CVE-2008-6647—webappsphp10 may 2008
SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
cPanel 11.x - '/scripts2/knowlegebase?issue' Cross-Site Scripting
CVE-2008-2070—webappsphp09 may 2008
The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Ktools Photostore 3.5.1 - 'gid' SQL Injection
CVE-2008-6649—webappsphp09 may 2008
SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versio
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
cPanel 11.x - '/scripts2/listaccts?search' Cross-Site Scripting
CVE-2008-2070—webappsphp09 may 2008
The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
cPanel 11.x - '/scripts2/changeip?user' Cross-Site Scripting
CVE-2008-2070—webappsphp09 may 2008
The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Ktools Photostore 3.5.1 - 'gid' SQL Injection
CVE-2008-6648—webappsphp09 may 2008
SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Application Server Portal 10g - Authentication Bypass
CVE-2008-2138—remotemultiple09 may 2008
Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ZyWALL 100 HTTP Referer Header - Cross-Site Scripting
CVE-2008-2167—remotemultiple08 may 2008
Cross-site scripting (XSS) vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or H
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SAP Internet Transaction Server 6200.1017.50954.0 Bu (WGate) - 'wgate.dll?~service' Cross-Site Scripting
CVE-2008-2123—webappscgi08 may 2008
Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 2 - UTF-7 HTTP Response Handling
CVE-2008-2168—remotewindows08 may 2008
Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web scr
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Orenosv HTTP/FTP Server 0.8.1 - FTP Commands Remote Buffer Overflow
CVE-2005-1666—doswindows08 may 2008
Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of service
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting
CVE-2008-2123—webappscgi08 may 2008
Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting
CVE-2008-2162—remotemultiple08 may 2008
Cross-site scripting (XSS) vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Forum Rank System 6 - 'settings['locale']' Multiple Local File Inclusions
CVE-2008-2227—webappsphp07 may 2008
Multiple directory traversal vulnerabilities in PHP-Fusion Forum Rank System 6 allow remote attackers to include and exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Tux CMS 0.1 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-2126—webappsphp07 may 2008
Multiple cross-site scripting (XSS) vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sphider 1.3.4 - 'query' Cross-Site Scripting
CVE-2008-5211—webappsphp06 may 2008
Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QTO File Manager 1.0 - 'qtofm.php' Arbitrary File Upload
CVE-2008-2110—webappsphp06 may 2008
Unrestricted file upload vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Yahoo! Assistant 3.6 - 'yNotifier.dll' ActiveX Control Memory Corruption
CVE-2008-2111—doswindows06 may 2008
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary cod
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Maian Uploader 4.0 - 'index.php' Cross-Site Scripting
CVE-2008-2202—webappsphp05 may 2008
Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
iGaming CMS 1.5 - 'poll_vote.php' SQL Injection
CVE-2008-2130—webappsphp05 may 2008
SQL injection vulnerability in poll_vote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Maian Uploader 4.0 - 'keywords' Cross-Site Scripting
CVE-2008-2202—webappsphp05 may 2008
Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BatmanPorTaL - 'profil.asp?id' SQL Injection
CVE-2008-6640—webappsphp05 may 2008
Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
LifeType 1.2.8 - 'admin.php' Cross-Site Scripting
CVE-2008-2196—webappsphp05 may 2008
Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Miniweb 2.0 - 'historymonth' SQL Injection
CVE-2008-6582—webappsphp05 may 2008
SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GEDCOM_TO_MYSQL - '/PHP/prenom.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-6655—webappsphp05 may 2008
Multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GEDCOM_TO_MYSQL - '/PHP/info.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-6655—webappsphp05 may 2008
Multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GEDCOM_TO_MYSQL - '/PHP/index.php?nom_branche' Cross-Site Scripting
CVE-2008-6655—webappsphp05 may 2008
Multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BatmanPorTaL - 'uyeadmin.asp?id' SQL Injection
CVE-2008-6640—webappsphp05 may 2008
Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
← anteriorpágina 307 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.