Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.980exploits catalogados
36.899CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8959Nuclei 4393Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Jeebles Directory 2.9.60 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-1355—webappsphp12 mar 2008
Cross-site scripting (XSS) vulnerability in index.php in Jeebles Technology Jeebles Directory 2.9.60 allows remote attac
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco User-Changeable Password (UCP) 3.3.4.12.5 - 'CSuserCGI.exe' Multiple Remote Vulnerabilities
CVE-2008-0532—doswindows12 mar 2008
Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Ac
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-7134—webappsphp12 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Chris LaPointe Download Center 1.2 - 'search' Cross-Site Scripting
CVE-2008-7134—webappsphp12 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Chris LaPointe Download Center 1.2 - 'category' Cross-Site Scripting
CVE-2008-7134—webappsphp12 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke zClassifieds Module - 'cat' SQL Injection
CVE-2008-1315—webappsphp11 mar 2008
SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke NukeC30 3.0 Module - 'id_catg' SQL Injection
CVE-2008-1308—webappsphp11 mar 2008
SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EncapsGallery 1.11.2 - 'watermark.php?File' Cross-Site Scripting
CVE-2008-1296—webappsphp10 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EncapsGallery 1.11.2 - 'catalog_watermark.php?file' Cross-Site Scripting
CVE-2008-1296—webappsphp10 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RemotelyAnywhere 8.0.668 - 'Accept-Charset' Null Pointer Denial of Service
CVE-2008-1278—dosmultiple10 mar 2008
The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attac
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Gallarific - Multiple Script Direct Request Authentication Bypass
CVE-2008-1327—webappsphp10 mar 2008
Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke Hadith Module - 'cat' SQL Injection
CVE-2008-1298—webappsphp10 mar 2008
SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Drake CMS 0.4.11 RC8 - 'd_root' Local File Inclusion
CVE-2008-1371—webappsphp10 mar 2008
Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and e
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Gallarific - 'search.php?query' Cross-Site Scripting
CVE-2008-1326—webappsphp10 mar 2008
Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Panda Internet Security/AntiVirus+Firewall 2008 - 'CPoint.sys' Memory Corruption
CVE-2008-1471—doswindows08 mar 2008
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath.0' Arbitrary File Access
CVE-2008-1301—webappsphp08 mar 2008
Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath' Cross-Site Scripting
CVE-2008-1300—webappsphp08 mar 2008
Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/log
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Core 2.3.2 - '/wp-admin/users.php?inviteemail' Cross-Site Scripting
CVE-2008-1304—webappsphp07 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ImageVue 1.7 - 'dirxml.php?path' Cross-Site Scripting
CVE-2008-1273—webappsphp07 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ImageVue 1.7 - 'upload.php?path' Cross-Site Scripting
CVE-2008-1273—webappsphp07 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable 3.13 - IMAP Service Multiple Remote Vulnerabilities
CVE-2008-1277—doswindows07 mar 2008
The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Core 2.3.2 - '/wp-admin/invites.php?to' Cross-Site Scripting
CVE-2008-1304—webappsphp07 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Office 2000/2003/2004/XP - File Memory Corruption
CVE-2008-0118—doswindows07 mar 2008
Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 f
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ImageVue 1.7 - 'popup.php?path' Cross-Site Scripting
CVE-2008-1273—webappsphp07 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion
CVE-2008-7152—webappsphp07 mar 2008
Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ImageVue 1.7 - 'dir2.php?path' Cross-Site Scripting
CVE-2008-1273—webappsphp07 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Neptune Web Server 3.0 - 404 Error Page Cross-Site Scripting
CVE-2008-1283—remotemultiple07 mar 2008
Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Check Point VPN-1 UTM Edge NGX 7.0.48x - Login Page Cross-Site Scripting
CVE-2008-1208—remotehardware06 mar 2008
Cross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows r
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Airspan ProST WiMAX Device - Web Interface Authentication Bypass
CVE-2008-1262—remotehardware06 mar 2008
The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication cr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microworld eScan Server 9.0.742 - Directory Traversal
CVE-2008-1221—remotewindows06 mar 2008
Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Manag
23RIESGO
abrir ↗
← anteriorpágina 316 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.