Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.020exploits catalogados
35.276CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8604Nuclei 4251Metasploit 3473✓ solo verificadosrecientespopularesriesgo
24.446 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component com_j-projects - Blind SQL Injection
SQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pay Per Minute Video Chat Script 2.0/2.1 - Multiple Vulnerabilities
SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pay Per Minute Video Chat Script 2.0/2.1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KMSoft Guestbook 1.0 - Database Disclosure
KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Elite Gaming Ladders 3.0 - SQL Injection
SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Acidcat CMS 3.5 - Multiple Vulnerabilities
Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers
23RIESGO
abrir ↗Exploit-DB
Joomla! Component Bridge of Hope Template - SQL Injection
SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_cartweberp - Local File Inclusion
Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attacke
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_bfsurvey - Local File Inclusion
Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to inclu
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rezervi 3.0.2 - 'mail.inc.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register_globals is e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_abbrev - Local File Inclusion
Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote atta
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_tpjobs - Blind SQL Injection
SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Acidcat CMS 3.5 - Multiple Vulnerabilities
Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which al
23RIESGO
abrir ↗Exploit-DB
Joomla! Component com_hotbrackets - Blind SQL Injection
SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote
23RIESGO
abrir ↗Exploit-DB
Joomla! Component Bamboo Simpla Admin Template - SQL Injection
SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_bfsurvey_basic - SQL Injection
SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_biblestudy - Local File Inclusion
Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Left 4 Dead Stats 1.1 - SQL Injection
SQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
I-Escorts Directory - 'country_escorts.php?country_id' SQL Injection
SQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UranyumSoft Ýlan Servisi - Database Disclosure
UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)
Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-as
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LiveZilla 3.1.8.3 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
e-topbiz Slide Popups 1 PHP - Authentication Bypass
SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RoseOnlineCMS 3 B1 - 'admin' Local File Inclusion
Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is dis
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS Module dictionary 2.0.18 - 'detail.php' SQL Injection
SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component iF Portfolio Nexus - 'Controller' Remote File Inclusion
Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream Ripper 3.0.1.1 - '.pls' Universal Buffer Overflow
Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreePBX 2.5.2 - '/admin/config.php?tech' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreePBX 2.5.2 - Zap Channel Addition Description Parameter Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_if_nexus - Remote File Inclusion
Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows
38RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.