Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.899exploits catalogados
40.392CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Apache SpamAssassin Milter Plugin 0.3.1 - Remote Command Execution
The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
nus newssystem 1.02 - 'id' SQL Injection
SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TRIBISUR 2.0 - Local File Inclusion
Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bild Flirt System 2.0 - 'index.php?id' SQL Injection
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BigForum 4.5 - SQL Injection
SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dev4u CMS (Personenseiten) - 'go_target.php' SQL Injection
SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPCOIN 1.2.1 - 'mod.php' Local File Inclusion
Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. (
23RIESGO
abrir ↗Exploit-DB
OneCMS 2.5 - SQL Injection
SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB
Kolang 4.3.10 < 5.3.0 - 'proc_open()' PHP 'safe_mode' Bypass
The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1)
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
smartplugs 1.3 - 'showplugs.php' SQL Injection
SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB
Opera 10.50 - integer Overflow
Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Leng
28RIESGO
abrir ↗Exploit-DB
Gnat-TGP 1.2.20 - Remote File Inclusion
PHP remote file inclusion vulnerability in includes/tgpinc.php in Gnat-TGP 1.2.20 and earlier allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_blog - Directory Traversal
Directory traversal vulnerability in index.php in the MyBlog (com_myblog) component 3.0.329 for Joomla! allows remote at
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6/7/8 - 'winhlp32.exe MsgBox()' Remote Code Execution
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
My Little Forum - 'contact.php' SQL Injection
SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phptroubleticket 2.0 - 'id' SQL Injection
SQL injection vulnerability in vedi_faq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TRUC 0.11 - 'login_reset_password_page.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in login_reset_password_page.php in Tracking Requirements & Use Cases (TRUC) 0.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HazelPress Lite 0.0.4 - Authentication Bypass
Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execu
23RIESGO
abrir ↗Exploit-DB
RCA DCM425 Cable Modem - 'micro_httpd' Denial of Service (PoC)
micro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service (device reboot) via a lon
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Uiga Personal Portal - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Uiga Fan Club - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_yanc - SQL Injection
SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Project Man 1.0 - Authentication Bypass
Multiple SQL injection vulnerabilities in login.php in Project Man 1.0 and earlier allow remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpCDB 1.0 - Local File Inclusion
Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute arb
23RIESGO
abrir ↗Exploit-DB
Scripts Feed Business Directory - SQL Injection
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to
23RIESGO
abrir ↗Exploit-DB
Pre Classified Listings - SQL Injection
SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB
phpMySite - Cross-Site Scripting / SQL Injection
SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB
phpRAINCHECK 1.0.1 - SQL Injection
SQL injection vulnerability in print_raincheck.php in phpRAINCHECK 1.0.1 and earlier allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DZ Erotik Auktionshaus 4.rgo - 'news.php' SQL Injection
SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProMan 0.1.1 - Multiple File Inclusions
Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute a
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.