Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.020exploits catalogados
35.276CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8604Nuclei 4251Metasploit 3473✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion
CVE-2010-1217—webappsphp19 mar 2010
Directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!, when magic_quotes_gpc is
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpscripte24 Niedrig Gebote Pro Auktions System II - Blind SQL Injection
CVE-2010-1270—webappsphp18 mar 2010
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6 - Image Preloading Content-Policy Check Security Bypass
CVE-2010-0168—remotelinux18 mar 2010
The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpscripte24 Niedrig Gebote Pro Auktions System II - Blind SQL Injection
CVE-2010-1269—webappsphp18 mar 2010
SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Reader PDF - LibTiff Integer Overflow Code Execution
CVE-2006-3459—localwindows17 mar 2010
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and othe
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_ckforms - Multiple Vulnerabilities
CVE-2010-1344—webappsphp17 mar 2010
SQL injection vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eFront 3.5.5 - 'langname' Local File Inclusion
CVE-2010-1003—webappsphp17 mar 2010
Directory traversal vulnerability in www/editor/tiny_mce/langs/language.php in eFront 3.5.x through 3.5.5 allows remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Reader PDF - LibTiff Integer Overflow Code Execution
CVE-2010-0188HIGHbajo ataqueransomwarelocalwindows17 mar 2010
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 11 - '.AVI' File Colorspace Conversion Remote Memory Corruption
CVE-2010-1042—doswindows17 mar 2010
Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to caus
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Virtual PC Hypervisor - Memory Protection
CVE-2010-1225—localwindows17 mar 2010
The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_ckforms - Multiple Vulnerabilities
CVE-2010-1345—webappsphp17 mar 2010
Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote a
43RIESGO
abrir ↗
Exploit-DB
Free Real Estate Contact Form 1.09 - Local File Inclusion
CVE-2010-1062—webappsphp16 mar 2010
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities
CVE-2010-3314—webappsphp16 mar 2010
Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versio
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpscripte24 Auktionshaus Community Standart System - Blind SQL Injection
CVE-2010-1269—webappsphp16 mar 2010
SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities
CVE-2010-3313—webappsphp16 mar 2010
phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Short URL 1.01 - Local File Inclusion
CVE-2010-1060—webappsphp16 mar 2010
Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabl
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpscripte24 Auktionshaus Community Standart System - Blind SQL Injection
CVE-2010-1270—webappsphp16 mar 2010
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusion
CVE-2010-0972—webappsphp15 mar 2010
Directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers t
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Address Book Script 1.09 - Local File Inclusion
CVE-2010-1058—webappsphp15 mar 2010
Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_g
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osDate 2.1.9 - Remote File Inclusion
CVE-2010-1055—webappsphp15 mar 2010
Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic_quotes_gpc is disabled and regi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_janews - Local File Inclusion
CVE-2010-1219—webappsphp15 mar 2010
Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
iPhone Springboard - Malformed Character Crash (PoC)
CVE-2010-1226—doshardware15 mar 2010
The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attacker
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_rokdownloads - Local File Inclusion
CVE-2010-1056—webappsphp15 mar 2010
Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remot
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pars CMS - 'RP' Multiple SQL Injections
CVE-2010-1054—webappsasp15 mar 2010
Multiple SQL injection vulnerabilities in ParsCMS allow remote attackers to execute arbitrary SQL commands via the RP pa
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Dojo Toolkit 1.4.1 - '/doh/runner.html' Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-2273—webappsmultiple15 mar 2010
Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Dojo Toolkit 1.4.1 - '/dijit/tests/_testCommon.js?theme' Cross-Site Scripting
CVE-2010-2275—webappsmultiple15 mar 2010
Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote at
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DZCP (deV!L_z Clanportal) 1.5.2 - Remote File Inclusion
CVE-2010-0966—webappsphp14 mar 2010
PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2, when register_globals is e
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell eDirectory 8.8.5 - DHost Weak Session Cookie Session Hijacking (Metasploit)
CVE-2009-4655—remotenovell14 mar 2010
The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote att
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPpool media Domain Verkaufs und Auktions Portal - 'index.php' SQL Injection
CVE-2010-0973—webappsphp14 mar 2010
SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PhpMyLogon 2.0 - SQL Injection
CVE-2010-0970—webappsphp14 mar 2010
SQL injection vulnerability in phpmylogon.php in PhpMyLogon 2 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
← anteriorpágina 392 / 815siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.