Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.655exploits catalogados
39.248CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.347Exploit-DB 24.485GitHub PoC 16.178VulnCheck XDB 9644Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
Mambo Component com_lurm_constructor 0.6b - Remote File Inclusion
CVE-2006-4372—webappsphp
PHP remote file inclusion vulnerability in admin.lurm_constructor.php in the Lurm Constructor component (com_lurm_constr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Invision Gallery 2.0.7 - 'readfile()' / SQL Injection
CVE-2006-5205—webappsphp
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (do
28RIESGO
abrir ↗
Referência✓ VexDay Proof
LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password
CVE-2008-5308—webappsphp
The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DeluxeBB 1.2 - Blind SQL Injection
CVE-2008-6146—webappsphp
SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is disabled, allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sepcity Shopping Mall - SQL Injection
CVE-2008-6151—webappsasp
SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Claroline 1.8.0 rc1 - 'import.lib.php' Remote File Inclusion
CVE-2006-5256—webappsphp
PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Project Management 0.8.10 - Multiple Local/Remote File Inclusions
CVE-2007-5642—webappsphp
Multiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to incl
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Nitrotech 0.0.3a - Remote File Inclusion / SQL Injection
CVE-2008-5334—webappsphp
PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Kbase 1.0 - SQL Injection
CVE-2008-6166—webappsphp
SQL injection vulnerability in the KBase (com_kbase) 1.2 component for Joomla! allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
vidshare pro - SQL Injection / Cross-Site Scripting
CVE-2009-1735—webappsphp
Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fire Soft Board RC 3 - 'racine' Remote File Inclusion
CVE-2006-4716—webappsphp
PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MyABraCaDaWeb 1.0.3 - 'base' Remote File Inclusion
CVE-2006-4719—webappsphp
Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register_globals is enabled, allow remot
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SilverSHielD 1.0.2.34 - Denial of Service
CVE-2008-6175—doswindows
SilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash) via a crafted argument to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
mcGalleryPRO 2006 - 'path_to_folder' Remote File Inclusion
CVE-2006-4720—webappsphp
PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RaidenHTTPD 1.1.49 - 'SoftParserFileXml' Remote Code Execution
CVE-2006-4723—remotewindows
PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_global
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component mp3 allopass 1.0 - Remote File Inclusion
CVE-2007-5412—webappsphp
Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass (com_mp3_allopass) 1.0 component for Joo
35RIESGO
abrir ↗
Referência✓ VexDay Proof
scWiki 1.0 Beta 2 - 'common.php?pathdot' Remote File Inclusion
CVE-2007-5843—webappsphp
PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute a
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Ultra Shareware Office Control - ActiveX Control Remote Buffer Overflow
CVE-2008-3878—remotewindows
Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware
50RIESGO
abrir ↗
Referência✓ VexDay Proof
CUPS < 1.3.8-4 - Local Privilege Escalation
CVE-2008-5377—localmultiple
pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log tempo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Web Server Creator 0.1 - 'l' Remote File Inclusion
CVE-2006-4746—webappsphp
PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB SpamOborona Mod 1.0b - Remote File Inclusion
CVE-2006-5385—webappsphp
PHP remote file inclusion vulnerability in admin/admin_spam.php in the SpamOborona 1.0b and earlier phpBB module allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phosheezy 2.0 - Remote Command Execution
CVE-2009-0251—webappsphp
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Luxbum 0.5.5/stable - Authentication Bypass
CVE-2009-1913—webappsphp
SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magic_quotes_gpc is disabled and dotclear authenticatio
23RIESGO
abrir ↗
Referência✓ VexDay Proof
P-News 1.16 - Remote File Inclusion
CVE-2006-5434—webappsphp
PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Harlandscripts Pro Traffic One - 'mypage.php' SQL Injection
CVE-2008-6213—webappsphp
SQL injection vulnerability in mypage.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Venalsur on-line Booking Centre - Cross-Site Scripting / SQL Injection
CVE-2008-6215—webappsphp
Cross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WTools 0.0.1a - 'INCLUDE_PATH' Remote File Inclusion
CVE-2006-4764—webappsphp
PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
p4CMS 1.05 - 'abs_pfad' Remote File Inclusion
CVE-2006-4769—webappsphp
PHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPht Topsites - 'common.php' Remote File Inclusion
CVE-2006-5458—webappsphp
PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wotw 5.0 - Local/Remote File Inclusion
CVE-2008-6224—webappsphp
Directory traversal vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attackers
23RIESGO
abrir ↗
← anteriorpágina 31 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.