Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados
35.370CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.175 exploits
Referência✓ VexDay Proof
Mailist 3.0 - Insecure Backup / Local File Inclusion
CVE-2009-0571—webappsphp
admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Flatchat 3.0 - 'pmscript.php' Local File Inclusion
CVE-2009-1486—webappsphp
Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Easy Scripts Answer and Question Script - Multiple Vulnerabilities
CVE-2009-1665—webappsphp
myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a
23RIESGO
abrir ↗
Referência
CVE-2022-2552
CVE-2022-2552—
Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
38RIESGO
abrir ↗
Referência
CVE-2010-1479
CVE-2010-1479—
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗
Referência
CVE-2010-1479
CVE-2010-1479—
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗
Referência
CVE-2022-26134
CVE-2022-26134CRITICALbajo ataqueransomware
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RIESGO
abrir ↗
Referência✓ VexDay Proof
NavBoard 2.6.0 - Remote Code Execution
CVE-2007-2899—webappsphp
Direct static code injection vulnerability in admin_config.php in NavBoard 2.6.0 allows remote attackers to inject arbit
23RIESGO
abrir ↗
Referência
CVE-2018-6007
CVE-2018-6007—
CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.
23RIESGO
abrir ↗
Referência
CVE-2018-6007
CVE-2018-6007—
CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.
23RIESGO
abrir ↗
Referência
CVE-2010-0367
CVE-2010-0367—
Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MyCMS 0.9.8 - Remote Command Execution (2)
CVE-2007-3586—webappsphp
Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência
CVE-2016-5676
CVE-2016-5676—
cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillanc
50RIESGO
abrir ↗
Referência
CVE-2012-4928
CVE-2012-4928—
Cross-site scripting (XSS) vulnerability in ow_updates/index.php in Oxwall 1.1.1 allows remote attackers to inject arbit
23RIESGO
abrir ↗
Referência
CVE-2012-2909
CVE-2012-2909—
Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Referência
CVE-2012-2918
CVE-2012-2918—
Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebPortal CMS 0.6.0 - 'index.php' SQL Injection
CVE-2007-6664—webappsphp
SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Harris WapChat 1 - Multiple Remote File Inclusions
CVE-2008-2074—webappsphp
Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is ena
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Jamroom 3.3.5 - Remote File Inclusion
CVE-2008-2883—webappsphp
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass
CVE-2008-4612—webappsasp
Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Broadcast Machine 0.1 - Multiple Remote File Inclusions
CVE-2008-6287—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
fresh email script 1.0 - Multiple Vulnerabilities
CVE-2008-7042—webappsphp
PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution
CVE-2009-1278—webappsphp
Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2013-7192
CVE-2013-7192—
Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2010-2925
CVE-2010-2925—
SQL injection vulnerability in index.php in Freeway CMS 1.4.3.210 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2010-2925
CVE-2010-2925—
SQL injection vulnerability in index.php in Freeway CMS 1.4.3.210 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2010-1710
CVE-2010-1710—
Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2010-1710
CVE-2010-1710—
Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Gelato - 'index.php?post' SQL Injection
CVE-2007-4918—webappsphp
SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Xcode OpenBase 10.0.0 (OSX) - Unsafe System Call Privilege Escalation
CVE-2006-5852—localosx
Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via
23RIESGO
abrir ↗
← anteriorpágina 393 / 740siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.