Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.060exploits catalogados
35.302CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8607Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.166 exploits
Referência
CVE-2012-5899
CVE-2012-5899—
Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2012-3837
CVE-2012-3837—
Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earl
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ourspace 2.0.9 - 'uploadmedia.cgi' Arbitrary File Upload
CVE-2007-4647—webappscgi
newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via uns
23RIESGO
abrir ↗
Referência
CVE-2022-29296
CVE-2022-29296—
A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Lithium CMS 4.04c - '/classes/index.php' Local File Inclusion
CVE-2006-5731—webappsphp
Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to inclu
23RIESGO
abrir ↗
Referência
CVE-2022-24223
CVE-2022-24223—
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.
50RIESGO
abrir ↗
Referência
CVE-2018-0966
CVE-2018-0966—
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security F
23RIESGO
abrir ↗
Referência✓ VexDay Proof
mBlog 1.2 - 'page' Remote File Disclosure
CVE-2007-6582—webappsphp
Directory traversal vulnerability in index.php in mBlog 1.2 allows remote attackers to read arbitrary files via a .. (do
23RIESGO
abrir ↗
Referência✓ VexDay Proof
artmedic weblog 1.0 - Multiple Local File Inclusions
CVE-2008-0798—webappsphp
Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow
23RIESGO
abrir ↗
Referência
CVE-2021-24664
CVE-2021-24664—
WPSchoolPress < 2.1.17 - Multiple Admin+ Stored Cross-Site Scripting
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TinXCMS 1.1 - Local File Inclusion / Cross-Site Scripting
CVE-2008-2975—webappsphp
Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to injec
23RIESGO
abrir ↗
Referência
CVE-2014-7153
CVE-2014-7153—
SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1.
23RIESGO
abrir ↗
Referência
CVE-2012-6043
CVE-2012-6043—
Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
HomePH Design 2.10 RC2 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
CVE-2008-2982—webappsphp
Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register_globals is enabled, allow remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
moziloCMS 1.10.1 - 'download.php' Arbitrary Download File
CVE-2008-3589—webappsphp
Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TinyCMS 1.1.2 - 'templater.php' Local File Inclusion
CVE-2008-4740—webappsphp
Directory traversal vulnerability in templater.php in the ZZ_Templater module in TinyCMS 1.1.2, when register_globals is
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MyKtools 2.4 - 'langage' Local File Inclusion
CVE-2008-4781—webappsphp
Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MemHT Portal 4.0.1 - SQL Injection / Code Execution
CVE-2008-5132—webappsphp
SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
celerbb 0.0.2 - Multiple Vulnerabilities
CVE-2009-0853—webappsphp
login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obta
23RIESGO
abrir ↗
Referência
CVE-2009-3823
CVE-2009-3823—
Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote a
23RIESGO
abrir ↗
Referência
CVE-2009-4723
CVE-2009-4723—
Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2012-5331
CVE-2012-5331—
Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. (do
23RIESGO
abrir ↗
Referência
CVE-2009-3507
CVE-2009-3507—
Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
GuestCal 2.1 - 'index.php?lang' Local File Inclusion
CVE-2009-1319—webappsphp
Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute
23RIESGO
abrir ↗
Referência
CVE-2026-11531
CVE-2026-11531MEDIUM
imvks786 student_management_system Administrator Login Endpoint admin_login.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2009-4426
CVE-2009-4426—
Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers
23RIESGO
abrir ↗
Referência
CVE-2009-4426
CVE-2009-4426—
Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers
23RIESGO
abrir ↗
Referência
CVE-2018-11404
CVE-2018-11404—
DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.
23RIESGO
abrir ↗
Referência
CVE-2016-5237
CVE-2016-5237—
Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to m
23RIESGO
abrir ↗
Referência
CVE-2014-9528
CVE-2014-9528—
SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListControlle
23RIESGO
abrir ↗
← anteriorpágina 386 / 739siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.