Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.240 exploits

Referência✓ VexDay Proof

Weatimages 1.7.1 - ini[langpack] Remote File Inclusion

CVE-2007-1999—webappsphp

PHP remote file inclusion vulnerability in index.php in Weatimages 1.7.1 and earlier, when weatimages.ini is missing, al

23RIESGO

abrir ↗

Referência✓ VexDay Proof

InoutMailingListManager 3.1 - Remote Command Execution

CVE-2007-2002—webappsphp

InoutMailingListManager 3.1 and earlier allows remote attackers to access certain restricted functionality, and upload a

23RIESGO

abrir ↗

Referência

CVE-2017-15367

CVE-2017-15367—

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access

28RIESGO

abrir ↗

Referência

CVE-2019-13577

CVE-2019-13577—

SnmpAdm.exe in MAPLE WBT SNMP Administrator v2.0.195.15 has an Unauthenticated Remote Buffer Overflow via a long string

28RIESGO

abrir ↗

Referência

CVE-2021-46418

CVE-2021-46418—

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.

43RIESGO

abrir ↗

Referência

CVE-2009-3336

CVE-2009-3336—

SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência

CVE-2009-4872

CVE-2009-4872—

Multiple SQL injection vulnerabilities in globepersonnel_login.asp in Logoshows BBS 2.0 allow remote attackers to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

torrentflux 2.2 - Arbitrary File Create/ Execute/Delete

CVE-2006-6330—webappsphp

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

pl-PHP Beta 0.9 - Multiple Vulnerabilities

CVE-2007-2007—webappsphp

admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to 1.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

openMairie 1.10 - '/scr/soustab.php' Local File Inclusion

CVE-2007-2069—webappsphp

Directory traversal vulnerability in scr/soustab.php in openMairie 1.11 and earlier allows remote attackers to include a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component OnlineFlashQuiz 1.0.2 - Remote File Inclusion

CVE-2008-1682—webappsphp

PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) 1

28RIESGO

abrir ↗

Referência✓ VexDay Proof

VMware - COM API ActiveX Remote Buffer Overflow (PoC)

CVE-2008-3892—doswindows

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMwar

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Recly!Competitions 1.0.0 - Multiple Remote File Inclusions

CVE-2008-5790—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com_competitions) component 1.0 for Joomla

35RIESGO

abrir ↗

Referência✓ VexDay Proof

CMScout 2.06 - SQL Injection / Local File Inclusion

CVE-2008-6726—webappsphp

Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers t

23RIESGO

abrir ↗

Referência

CVE-2018-19126

CVE-2018-19126—

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file u

28RIESGO

abrir ↗

Referência

CVE-2009-2782

CVE-2009-2782—

SQL injection vulnerability in the JFusion (com_jfusion) component for Joomla! allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2022-4297

CVE-2022-4297CRITICAL

WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi

48RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_colophon' 1.2 - Remote File Inclusion

CVE-2006-3969—webappsphp

PHP remote file inclusion vulnerability in administrator/components/com_colophon/admin.colophon.php in Colophon 1.2 and

23RIESGO

abrir ↗

Referência

CVE-2017-17640

CVE-2017-17640—

Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country pa

23RIESGO

abrir ↗

Referência

CVE-2022-4297

CVE-2022-4297CRITICAL

WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi

48RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MGM 0.95r2 - Remote File Inclusion

CVE-2006-3980—webappsphp

PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM)

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Site@School 2.4.02 - Arbitrary File Upload

CVE-2006-4922—webappsphp

Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and ear

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ProgSys 0.156 - 'RR.php' Remote File Inclusion

CVE-2006-4944—webappsphp

PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Galeria Zdjec 3.0 - 'zd_numer.php' Local File Inclusion

CVE-2007-0637—webappsphp

Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include an

23RIESGO

abrir ↗

Referência✓ VexDay Proof

JChit counter 1.0.0 - 'imgsrv.php?ac' Remote File Disclosure

CVE-2007-2184—webappsphp

Directory traversal vulnerability in imgsrv.php in jchit counter 1.0.0 allows remote attackers to read arbitrary files v

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Foxit Reader 2.0 - 'PDF' Remote Denial of Service

CVE-2007-2186—doswindows

Foxit Reader 2.0 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.

23RIESGO

abrir ↗

Referência

CVE-2020-2230

CVE-2020-2230—

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in

45RIESGO

abrir ↗

Referência✓ VexDay Proof

Pie Cart Pro - 'Home_Path' Remote File Inclusion

CVE-2006-4970—webappsphp

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to ex

23RIESGO

abrir ↗

Referência

CVE-2026-110655

CVE-2026-110655LOW

miniupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseatt

28RIESGO

abrir ↗

Referência

CVE-2015-1579

CVE-2015-1579—

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitra

43RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.