Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
80.324exploits catalogados
37.130CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.614GitHub PoC 15.330VulnCheck XDB 9001Nuclei 4401Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
iPlanet Web Server 4.1 - Search Module Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKit 1.6.1 - 'comment.php' SQL Injection
SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/logout.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/user_catelog_password.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/upload_photo.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/send_email.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/include/config.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/membership_pricing.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/list_members.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/index.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/delete_member.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/approve_member.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/admin_password.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MediaWiki 1.x - 'AJAX index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris 9 - RPC Request Denial of Service
Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Edit-X - 'Edit_Address.php' Remote File Inclusion
PHP remote file inclusion vulnerability in edit_address.php in edit-x ecommerce allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/add_news.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/add_category.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/user_membership_password.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/user_extend.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/user_email.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/register.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/include/db_config.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/login.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/index.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/delete_category.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/couple_profile.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/couple_milestone.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/admin_paypal_email.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/change_catalog_template.php?_config[site_path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.