Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.679exploits catalogados
40.329CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.150Exploit-DB 24.488GitHub PoC 17.946VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
PageDirector CMS - Multiple Vulnerabilities
CVE-2010-2685—webappsphp28 jun 2010
siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote attac
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PageDirector CMS - Multiple Vulnerabilities
CVE-2010-2684—webappsphp28 jun 2010
SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
i-netsolution Job Search Engine - SQL Injection
CVE-2010-2611—webappsphp27 jun 2010
SQL injection vulnerability in show_search_result.php in i-netsolution Job Search Engine allows remote attackers to exec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz ybiz Polls Script - SQL Injection
CVE-2010-5004—webappsphp27 jun 2010
SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Swoopo Clone 2010 - SQL Injection
CVE-2010-4997—webappsphp27 jun 2010
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component jesectionfinder - Local File Inclusion
CVE-2010-2680—webappsphp26 jun 2010
Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla!
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_sef - Remote File Inclusion
CVE-2010-2681—webappsphp26 jun 2010
PHP remote file inclusion vulnerability in the SEF404x (com_sef) component for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JE Awd Song - Persistent Cross-Site Scripting
CVE-2010-2613—webappsphp26 jun 2010
Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows remo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
feh 1.7 - '--wget-Timestamp' Remote Code Execution
CVE-2010-2246—remotelinux25 jun 2010
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz - Multiple SQL Injections
CVE-2010-2691—webappsphp25 jun 2010
Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitra
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component jesubmit 1.4 - SQL Injection
CVE-2010-5022—webappsphp25 jun 2010
SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote at
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco Adaptive Security Response - HTTP Response Splitting
CVE-2008-7257—remotehardware25 jun 2010
CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series de
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz The Web Template Software - SQL Injection / Cross-Site Scripting
CVE-2010-2510—webappsphp24 jun 2010
SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell iManager - Multiple Vulnerabilities
CVE-2010-1929—dosnovell24 jun 2010
Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell iManager - Multiple Vulnerabilities
CVE-2010-1930—dosnovell24 jun 2010
Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (dae
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Weborf HTTP Server - Denial of Service
CVE-2010-2435—dosmultiple24 jun 2010
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode character
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AdaptCMS 2.0.0 Beta - 'init.php' Remote File Inclusion
CVE-2010-2618—webappsphp24 jun 2010
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is ena
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz Video Community Portal - 'user-profile.php' SQL Injection
CVE-2010-2508—webappsphp24 jun 2010
SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to exec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz Job Site Script - SQL Injection
CVE-2010-2610—webappsphp24 jun 2010
Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion (2)
CVE-2010-2682—webappsphp24 jun 2010
Directory traversal vulnerability in the Realtyna Translator (com_realtyna) component 1.0.15 for Joomla! allows remote a
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz The Web Template Software - SQL Injection / Cross-Site Scripting
CVE-2010-2509—webappsphp24 jun 2010
Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject ar
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection
CVE-2010-4365—webappsphp23 jun 2010
SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote atta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz MLM Script - SQL Injection
CVE-2010-2511—webappsphp23 jun 2010
SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to e
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection
CVE-2010-2513—webappsphp23 jun 2010
SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows r
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
2DayBiz Matrimonial Script - SQL Injection
CVE-2010-2512—webappsphp23 jun 2010
SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FreeBSD 8.0/7.3/7.2 - 'nfs_mount()' Local Privilege Escalation
CVE-2010-2020—localfreebsd23 jun 2010
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Boat Classifieds - 'printdetail.asp?Id' SQL Injection
CVE-2010-2687—webappsasp23 jun 2010
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FreeBSD - 'mountnfs()' Denial of Service
CVE-2010-2020—dosfreebsd23 jun 2010
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SafeNet SoftRemote - IKE Service Buffer Overflow (Metasploit)
CVE-2009-1943—remotewindows22 jun 2010
Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Job Search Engine Script - SQL Injection
CVE-2010-2609—webappsphp22 jun 2010
SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to exe
23RIESGO
abrir ↗
← anteriorpágina 369 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.