Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.058exploits catalogados
35.300CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8607Nuclei 4255Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.166 exploits
Referência✓ VexDay Proof
Site-Assistant 0990 - 'paths[version]' Remote File Inclusion
CVE-2007-0867—webappsphp
PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ttCMS 4 - 'ez_sql.php?lib_path' Remote File Inclusion
CVE-2007-1708—webappsphp
PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CyBoards PHP Lite 1.21 - 'script_path' Remote File Inclusion
CVE-2007-1983—webappsphp
PHP remote file inclusion vulnerability in include/default_header.php in Cyboards PHP Lite 1.21 allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sisplet CMS 05.10 - 'site_path' Remote File Inclusion
CVE-2007-2347—webappsphp
PHP remote file inclusion vulnerability in main/forum/komentar.php in OneClick CMS (aka Sisplet CMS) 05.10 and earlier a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sendcard 3.4.1 - 'sendcard.php?form' Local File Inclusion
CVE-2007-2471—webappsphp
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
6ALBlog - 'newsid' SQL Injection
CVE-2007-3451—webappsphp
PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS 2.0.18 - Local File Inclusion / URL Redirecting
CVE-2008-0612—webappsphp
Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Web Slider 0.6 - Insecure Cookie/Authentication Handling
CVE-2008-2298—webappsphp
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
txtSQL 2.2 Final - 'startup.php' Remote File Inclusion
CVE-2008-3595—webappsphp
PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PhpBlock a8.5 - Multiple Remote File Inclusions
CVE-2008-5210—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code
23RIESGO
abrir ↗
Referência
CVE-2010-1469
CVE-2010-1469—
Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for J
38RIESGO
abrir ↗
Referência
CVE-2015-5075
CVE-2015-5075—
Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authe
23RIESGO
abrir ↗
Referência
CVE-2015-5075
CVE-2015-5075—
Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authe
23RIESGO
abrir ↗
Referência
CVE-2018-10619
CVE-2018-10619—
An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
netForo! 0.1 - 'down.php?file_to_download' Remote File Disclosure
CVE-2007-1392—webappsphp
Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗
Referência
CVE-2011-5026
CVE-2011-5026—
Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CzarNews 1.14 - 'tpath' Remote File Inclusion
CVE-2006-3685—webappsphp
PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗
Referência
CVE-2018-2698
CVE-2018-2698—
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th
23RIESGO
abrir ↗
Referência
CVE-2011-4803
CVE-2011-4803—
SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute a
23RIESGO
abrir ↗
Referência
CVE-2013-5757
CVE-2013-5757—
Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpsyncml 0.1.2 - Remote File Inclusion
CVE-2007-4978—webappsphp
Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2013-7185
CVE-2013-7185—
PotPlayer 1.5.40688: .avi File Memory Corruption
23RIESGO
abrir ↗
Referência
CVE-2017-7725
CVE-2017-7725—
concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "ca
23RIESGO
abrir ↗
Referência
CVE-2017-7725
CVE-2017-7725—
concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "ca
23RIESGO
abrir ↗
Referência✓ VexDay Proof
mutiple timesheets 5.0 - Multiple Vulnerabilities
CVE-2008-1415—webappsphp
Directory traversal vulnerability in index.php in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to
23RIESGO
abrir ↗
Referência
OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting
CVE-2020-29470—webappsphp
OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Subject field of mail. This vulnerability can allow an
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpQuiz 0.1.2 - SQL Injection / Code Execution
CVE-2006-4979—webappsphp
Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpinv 0.8.0 - Local File Inclusion / Cross-Site Scripting
CVE-2008-2694—webappsphp
Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Velocity Web-Server 1.0 - Directory Traversal
CVE-2008-7084—remotewindows
Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2010-1309
CVE-2010-1309—
Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary
23RIESGO
abrir ↗
← anteriorpágina 379 / 739siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.