Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.966exploits catalogados
35.269CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 22.166GitHub PoC 14.062VulnCheck XDB 8571Nuclei 4251Metasploit 3473✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB
Joomla! Component Jvehicles - Local File Inclusion
CVE-2010-1873—webappsphp01 abr 2010
SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote at
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component webERPcustomer - Local File Inclusion
CVE-2010-1315—webappsphp01 abr 2010
Directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com_weberpcustomer) component 1.2.1 and 1
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TugZip 3.5 Archiver - '.ZIP' File Buffer Overflow
CVE-2008-4779—localwindows01 abr 2010
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wav' Local Stack Buffer Overflow
CVE-2011-5165—localwindows31 mar 2010
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Centreon IT & Network Monitoring 2.1.5 - SQL Injection
CVE-2010-1301—webappsphp31 mar 2010
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Piwik 0.5.5 - 'form_url' Cross-Site Scripting
CVE-2010-1453—webappsphp31 mar 2010
Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to injec
23RIESGO
abrir ↗
Exploit-DB
OpenDcHub 0.8.1 - Remote Code Execution
CVE-2010-1147—remotelinux31 mar 2010
Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Reader - Escape From '.PDF' Execute Embedded Executable
CVE-2010-1239—localwindows31 mar 2010
Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Act
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component DW Graph - Local File Inclusion
CVE-2010-1302—webappsphp31 mar 2010
Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! a
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Reader - Escape From '.PDF' Execute Embedded Executable
CVE-2010-1240—localwindows31 mar 2010
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wav' (PoC)
CVE-2011-5165—doswindows30 mar 2010
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Shadow Stream Recorder 3.0.1.7 - '.asx' Local Buffer Overflow
CVE-2009-1642—localwindows30 mar 2010
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB
Yamamah 1.00 - Multiple Vulnerabilities
CVE-2010-2335—webappsphp30 mar 2010
SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote at
23RIESGO
abrir ↗
Exploit-DB
Yamamah 1.00 - Multiple Vulnerabilities
CVE-2010-1300—webappsphp30 mar 2010
SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbit
23RIESGO
abrir ↗
Exploit-DB
HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Topic Overflow
CVE-2009-4178—remotewindows30 mar 2010
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows rem
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 - Multiple Local File
CVE-2008-7254—webappsphp30 mar 2010
Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 - Multiple Local File
CVE-2010-1309—webappsphp30 mar 2010
Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow
CVE-2009-1642—localwindows30 mar 2010
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Easy-Clanpage 2.1 - SQL Injection
CVE-2008-1425—webappsmultiple30 mar 2010
SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_weblinks - 'id' SQL Injection
CVE-2010-2679—webappsphp29 mar 2010
SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow (PoC)
CVE-2009-1642—doswindows29 mar 2010
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TSOKA:CMS 1.1/1.9/2.0 - SQL Injection / Cross-Site Scripting
CVE-2010-2674—webappsphp28 mar 2010
SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TSOKA:CMS 1.1/1.9/2.0 - SQL Injection / Cross-Site Scripting
CVE-2010-2675—webappsphp28 mar 2010
Cross-site scripting (XSS) vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Multi Auktions Komplett System 2 - Blind SQL Injection
CVE-2010-1269—webappsphp28 mar 2010
SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Devana - SQL Injection
CVE-2010-2673—webappsphp28 mar 2010
SQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Multi Auktions Komplett System 2 - Blind SQL Injection
CVE-2010-1270—webappsphp28 mar 2010
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities
CVE-2007-5235—webappsphp27 mar 2010
Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Open Web Analytics 1.2.3 - Multiple File Inclusions
CVE-2010-2677—webappsphp27 mar 2010
PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is dis
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Open Web Analytics 1.2.3 - Multiple File Inclusions
CVE-2010-2676—webappsphp27 mar 2010
Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
UoW IMAPd Server - LSUB Buffer Overflow (Metasploit)
CVE-2000-0284—remotelinux26 mar 2010
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via
50RIESGO
abrir ↗
← anteriorpágina 390 / 815siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.