Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

80.753exploits catalogados

37.445CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.482Referência 23.871GitHub PoC 15.407VulnCheck XDB 9065Nuclei 4426Metasploit 3502✓ solo verificadosrecientes populares riesgo

19.066 exploits

Exploit-DB✓ VexDay Proof

EZContents 2.0.3 - 'shownews.php?GLOBALS[admin_home]' Remote File Inclusion

CVE-2006-4477—webappsphp30 ago 2006

Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute

23RIESGO

Exploit-DB✓ VexDay Proof

EZContents 2.0.3 - 'showpoll.php?GLOBALS[admin_home]' Remote File Inclusion

CVE-2006-4477—webappsphp30 ago 2006

Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute

23RIESGO

Exploit-DB✓ VexDay Proof

EZContents 2.0.3 - 'toprated.php?GLOBALS[language_home]' Remote File Inclusion

CVE-2006-4477—webappsphp30 ago 2006

Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute

23RIESGO

Exploit-DB✓ VexDay Proof

EZContents 2.0.3 - 'showguestbook.php?GLOBALS[admin_home]' Remote File Inclusion

CVE-2006-4477—webappsphp30 ago 2006

Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute

23RIESGO

Exploit-DB✓ VexDay Proof

EZContents 2.0.3 - 'review_summary.php?GLOBALS[admin_home]' Remote File Inclusion

CVE-2006-4477—webappsphp30 ago 2006

Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute

23RIESGO

Exploit-DB✓ VexDay Proof

Learn.com - 'Learncenter.asp' Cross-Site Scripting

CVE-2006-4540—webappsphp30 ago 2006

Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject a

23RIESGO

Exploit-DB✓ VexDay Proof

VisualShapers EZContents 2.0.3 - 'Loginreq2.php' Cross-Site Scripting

CVE-2006-4479—webappsphp30 ago 2006

Cross-site scripting (XSS) vulnerability in loginreq2.php in Visual Shapers ezContents 2.0.3 allows remote attackers to

23RIESGO

Exploit-DB✓ VexDay Proof

phpAtm 1.21 - 'include_location' Remote File Inclusion

CVE-2006-4749—webappsphp30 ago 2006

Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 allow remote attackers

23RIESGO

Exploit-DB✓ VexDay Proof

Streamripper 1.61.25 - HTTP Header Parsing Buffer Overflow (2)

CVE-2006-3124—remotewindows29 ago 2006

Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of s

28RIESGO

Exploit-DB✓ VexDay Proof

HLstats 1.34 - 'hlstats.php' Cross-Site Scripting

CVE-2006-4454—webappsphp29 ago 2006

Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web

23RIESGO

Exploit-DB✓ VexDay Proof

ModuleBased CMS - Multiple Remote File Inclusions

CVE-2006-4545—webappsphp29 ago 2006

PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP co

23RIESGO

Exploit-DB✓ VexDay Proof

Streamripper 1.61.25 - HTTP Header Parsing Buffer Overflow (1)

CVE-2006-3124—remotelinux29 ago 2006

Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of s

28RIESGO

Exploit-DB✓ VexDay Proof

Cybuzu Garoon 2.1.0 - Multiple SQL Injections

CVE-2006-4444—webappscgi28 ago 2006

Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute ar

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 5.0.1 - Daxctle.OCX Spline Method Heap Buffer Overflow

CVE-2006-4446—remotewindows28 ago 2006

Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP

35RIESGO

Exploit-DB✓ VexDay Proof

Cybozu Products - 'id' Arbitrary File Retrieval

CVE-2006-4490—webappscgi28 ago 2006

Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 al

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (2)

CVE-2006-3439—remotewindows28 ago 2006

Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote a

60RIESGO

Exploit-DB✓ VexDay Proof

Ay System CMS 2.6 - 'main.php' Remote File Inclusion

CVE-2006-4441—webappsphp27 ago 2006

Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to

23RIESGO

Exploit-DB✓ VexDay Proof

Symantec AntiVirus - IOCTL Kernel Privilege Escalation (1)

CVE-2006-4927—localwindows26 ago 2006

The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec Ant

23RIESGO

Exploit-DB✓ VexDay Proof

Symantec AntiVirus - IOCTL Kernel Privilege Escalation (2)

CVE-2006-4927—localwindows26 ago 2006

The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec Ant

23RIESGO

Exploit-DB✓ VexDay Proof

BigACE 1.8.2 - 'item_main.php' Remote File Inclusion

CVE-2006-4423—webappsphp26 ago 2006

Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code

23RIESGO

Exploit-DB✓ VexDay Proof

BigACE 1.8.2 - 'admin.cmd.php' Remote File Inclusion

CVE-2006-4423—webappsphp26 ago 2006

Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code

23RIESGO

Exploit-DB✓ VexDay Proof

BigACE 1.8.2 - 'upload_form.php' Remote File Inclusion

CVE-2006-4423—webappsphp26 ago 2006

Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code

23RIESGO

Exploit-DB✓ VexDay Proof

MyBB 1.1.7 - Multiple HTML Injection Vulnerabilities

CVE-2006-4449—webappsphp26 ago 2006

Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions a

23RIESGO

Exploit-DB✓ VexDay Proof

Alt-N MDaemon POP3 Server < 9.06 - 'USER' Remote Heap Overflow

CVE-2006-4364—remotewindows26 ago 2006

Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attacker

35RIESGO

Exploit-DB✓ VexDay Proof

Alstrasoft Video Share Enterprise 4.x - 'MyajaxPHP.php' Remote File Inclusion

CVE-2006-4443—webappsphp26 ago 2006

PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to

23RIESGO

Exploit-DB✓ VexDay Proof

Joomla! / Mambo Component Comprofiler 1.0 - 'class.php' Remote File Inclusion

CVE-2006-4553—webappsphp26 ago 2006

PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joom

23RIESGO

Exploit-DB✓ VexDay Proof

Jetbox CMS 2.1 - 'Search_function.php' Remote File Inclusion

CVE-2006-4422—webappsphp26 ago 2006

PHP remote file inclusion vulnerability in includes/phpdig/libs/search_function.php in Jetbox CMS 2.1 allows remote atta

23RIESGO

Exploit-DB✓ VexDay Proof

Jupiter CMS 1.1.5 - 'index.php' Remote File Inclusion

CVE-2006-4428CRITICALwebappsphp26 ago 2006

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary P

48RIESGO

Exploit-DB✓ VexDay Proof

BigACE 1.8.2 - 'download.cmd.php' Remote File Inclusion

CVE-2006-4423—webappsphp26 ago 2006

Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code

23RIESGO

Exploit-DB✓ VexDay Proof

Apache 1.3.35/2.0.58/2.2.2 - Arbitrary HTTP Request Headers Security

CVE-2006-3918—remotelinux24 ago 2006

http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before

45RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.