Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados
40.392CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6 - 'gfxTextRun::SanitizeGlyphRuns()' Remote Memory Corruption
CVE-2010-0166—dosmultiple24 mar 2010
The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 be
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component SMEStorage - Local File Inclusion
CVE-2010-1858—webappsphp23 mar 2010
Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote atta
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SpringSource (Multiple Products) - Multiple HTML Injection Vulnerabilities
CVE-2009-2907—webappsphp23 mar 2010
Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Manageme
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RepairShop2 - 'index.php?Prod' Cross-Site Scripting
CVE-2010-1856—webappsphp23 mar 2010
Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Property - Local File Inclusion
CVE-2010-1875—webappsphp23 mar 2010
Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows re
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Lussumo Vanilla 1.1.10 - 'definitions.php' Multiple Remote File Inclusions
CVE-2010-1337—webappsphp23 mar 2010
Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Insky CMS 006-0111 - Multiple Remote File Inclusions
CVE-2010-1335—webappsphp23 mar 2010
Multiple PHP remote file inclusion vulnerabilities in Insky CMS 006-0111, when register_globals is enabled, allow remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mini-CMS RibaFS 1.0 - Authentication Bypass
CVE-2010-1346—webappsphp22 mar 2010
SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magic_quotes_gpc is disabled, allows remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Safari 4.0.5 - Object Tag 'JavaScriptCore.dll' Crash (Denial of Service)
CVE-2010-1131—doswindows22 mar 2010
JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of servic
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Uiga Fan Club - SQL Injection
CVE-2010-1365—webappsphp22 mar 2010
SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebMaid CMS 0.2-6 Beta - Multiple Remote File Inclusions
CVE-2010-1267—webappsphp21 mar 2010
Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
NotSopureEdit 1.4.1 - Remote File Inclusion
CVE-2010-1216—webappsphp21 mar 2010
PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and earlier, when register_glob
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Woltlab Burning Board Teamsite Hack 3.0 - 'ts_other.php' SQL Injection
CVE-2010-1338—webappsphp21 mar 2010
SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebMaid CMS 0.2-6 Beta - Multiple Remote File Inclusions
CVE-2010-1266—webappsphp21 mar 2010
Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execu
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pay Per Watch & Bid Auktions System - 'auktion.php?id_auk' Blind SQL Injection
CVE-2010-1855—webappsphp20 mar 2010
SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to execute arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion
CVE-2010-1217—webappsphp19 mar 2010
Directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!, when magic_quotes_gpc is
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6 - Image Preloading Content-Policy Check Security Bypass
CVE-2010-0168—remotelinux18 mar 2010
The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpscripte24 Niedrig Gebote Pro Auktions System II - Blind SQL Injection
CVE-2010-1269—webappsphp18 mar 2010
SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpscripte24 Niedrig Gebote Pro Auktions System II - Blind SQL Injection
CVE-2010-1270—webappsphp18 mar 2010
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Virtual PC Hypervisor - Memory Protection
CVE-2010-1225—localwindows17 mar 2010
The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eFront 3.5.5 - 'langname' Local File Inclusion
CVE-2010-1003—webappsphp17 mar 2010
Directory traversal vulnerability in www/editor/tiny_mce/langs/language.php in eFront 3.5.x through 3.5.5 allows remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_ckforms - Multiple Vulnerabilities
CVE-2010-1344—webappsphp17 mar 2010
SQL injection vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Reader PDF - LibTiff Integer Overflow Code Execution
CVE-2006-3459—localwindows17 mar 2010
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and othe
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Reader PDF - LibTiff Integer Overflow Code Execution
CVE-2010-0188HIGHbajo ataqueransomwarelocalwindows17 mar 2010
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 11 - '.AVI' File Colorspace Conversion Remote Memory Corruption
CVE-2010-1042—doswindows17 mar 2010
Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to caus
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_ckforms - Multiple Vulnerabilities
CVE-2010-1345—webappsphp17 mar 2010
Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote a
43RIESGO
abrir ↗
Exploit-DB
Free Real Estate Contact Form 1.09 - Local File Inclusion
CVE-2010-1062—webappsphp16 mar 2010
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities
CVE-2010-3313—webappsphp16 mar 2010
phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities
CVE-2010-3314—webappsphp16 mar 2010
Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versio
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpscripte24 Auktionshaus Community Standart System - Blind SQL Injection
CVE-2010-1270—webappsphp16 mar 2010
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
← anteriorpágina 393 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.