Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
GD Graphics Library 2.0.33 - Remote Denial of Service
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bookmark4U 2.0 - '/inc/dbase.php?env[include_prefix]' Remote File Inclusion
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kmita FAQ 1.0 - 'index.php?catid' SQL Injection
SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - Frameset Memory Corruption
Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which al
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bookmark4U 2.0 - '/inc/function.php?env[include_prefix]' Remote File Inclusion
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget CMS 1.0.6 - 'file_path' Remote File Inclusion
PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows rem
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bookmark4U 2.0 - '/inc/config.php?env[include_prefix]' Remote File Inclusion
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dmx Forum 2.1a - 'edit.php' Remote Password Disclosure
Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dmx Forum 2.1a - 'edit.php' Remote Password Disclosure
Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
myNewsletter 1.1.2 - 'Username' SQL Injection
Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ESTsoft InternetDisk - Arbitrary File Upload / Script Execution
Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CoolForum 0.x - 'editpost.php' SQL Injection
SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Particle Wiki 1.0.2 - SQL Injection
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bookmark4U 2.0 - '/inc/common.php?env[include_prefix]' Remote File Inclusion
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quake 3 Engine - 'CL_ParseDownload' Remote Buffer Overflow
Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple pr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel < 2.6.16.18 - Netfilter NAT SNMP Module Remote Denial of Service
The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CyBoards PHP Lite 1.21/1.25 - 'Common.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kmita FAQ 1.0 - 'search.php?q' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Kmita FAQ 1.0 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DotClear 1.2.4 - 'prepend.php' Remote File Inclusion
PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - 'showcatpicks.php?file_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - '/admin/categories.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - '/admin/index.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - '/admin/articles.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LifeType 1.0.4 - SQL Injection
SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - '/admin/authors.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBWd Guestbook 1.0 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - '/admin/editconfig.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PixelPost 1-5rc1-2 - Privilege Escalation
Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XUEBook 1.0 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - 'showarticle.php?file_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.