Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.634exploits catalogados
40.286CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.110Exploit-DB 24.488GitHub PoC 17.941VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
CVE-2010-2697—webappsphp07 jul 2010
Cross-site scripting (XSS) vulnerability in Sijio Community Software allows remote authenticated users to inject arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache (Windows x86) - Chunked Encoding (Metasploit)
CVE-2002-0392—remotewindows_x8607 jul 2010
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possi
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
CVE-2010-2696—webappsphp07 jul 2010
SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable - Authorisation Header Buffer Overflow (Metasploit)
CVE-2005-1348—remotewindows07 jul 2010
Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote at
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BadBlue 2.5 - 'ext.dll' Remote Buffer Overflow (Metasploit)
CVE-2005-0595—remotewindows07 jul 2010
Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component ArtForms 2.1b7.2 rc2 - Multiple Vulnerabilities
CVE-2010-2846—webappsphp07 jul 2010
Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! al
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (Metasploit)
CVE-2008-4193—remotewindows07 jul 2010
Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS - ISAPI 'w3who.dll' Query String Overflow (Metasploit)
CVE-2004-1134—remotewindows07 jul 2010
Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possib
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
CVE-2010-2698—webappsphp07 jul 2010
Multiple cross-site scripting (XSS) vulnerabilities in Sijio Community Software allow remote authenticated users to inje
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component ArtForms 2.1b7.2 rc2 - Multiple Vulnerabilities
CVE-2010-2847—webappsphp07 jul 2010
Multiple SQL injection vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Simple Document Management System - SQL Injection
CVE-2010-4986—webappsphp07 jul 2010
SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execute
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) 7.53 - 'ovwebsnmpsrv.exe' Local Buffer Overflow (SEH)
CVE-2010-1964—localwindows07 jul 2010
Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers t
50RIESGO
abrir ↗
Exploit-DB
Joomla! Component PaymentsPlus 2.1.5 - Blind SQL Injection
CVE-2010-4992—webappsphp07 jul 2010
SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DD-WRT HTTPd Daemon/Service - Arbitrary Command Execution (Metasploit)
CVE-2009-2765—webappscgi07 jul 2010
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component ArtForms 2.1b7.2 rc2 - Multiple Vulnerabilities
CVE-2010-2848—webappsphp07 jul 2010
Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfor
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component NeoRecruit 1.6.4 - 'Itemid' Blind SQL Injection
CVE-2010-4995—webappsphp06 jul 2010
SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to ex
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Lyrics 3.0 - Engine SQL Injection
CVE-2010-2721—webappsphp06 jul 2010
SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
CVE-2010-2654—webappsphp06 jul 2010
Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmwar
23RIESGO
abrir ↗
Exploit-DB
Auto Dealer - SQL Injection
CVE-2010-4974—webappsphp06 jul 2010
SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to ex
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow
CVE-2010-2309—remoteosx06 jul 2010
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BS Business Directory - 'articlesdetails.php' SQL Injection
CVE-2010-4969—webappsphp06 jul 2010
SQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB
PsNews 1.3 - SQL Injection
CVE-2010-2716—webappsphp06 jul 2010
Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
CVE-2010-2655—webappsphp06 jul 2010
Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Bladecenter Management - Multiple Web Application Vulnerabilities
CVE-2010-2656—webappsphp06 jul 2010
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AutarTimonial 1.0.8 - SQL Injection
CVE-2010-5003—webappsphp06 jul 2010
SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bs Recipes_Website Script - SQL Injection / Authentication Bypass
CVE-2010-2670—webappsphp05 jul 2010
SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting
CVE-2010-2669—webappsphp05 jul 2010
Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attacker
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Canteen 1.0 - Local File Inclusion
CVE-2010-4977—webappsphp05 jul 2010
SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers t
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
NewsOffice 2.0.18 - 'news_show.php' Cross-Site Scripting
CVE-2010-2844—webappsphp05 jul 2010
Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WikiWebHelp 0.28 - SQL Injection
CVE-2010-4970—webappsphp05 jul 2010
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
← anteriorpágina 365 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.