Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
outgun 1.0.3 bot 2 - Multiple Vulnerabilities
CVE-2006-2402—doswindows14 may 2006
Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote att
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)
CVE-2006-2555—doswindows14 may 2006
The parse_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)
CVE-2006-2554—doswindows14 may 2006
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to exec
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
outgun 1.0.3 bot 2 - Multiple Vulnerabilities
CVE-2006-2399—doswindows14 may 2006
Stack-based buffer overflow in the ServerNetworking::incoming_client_data function in servnet.cpp in Outgun 1.0.3 bot 2
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'affich.php?image' Cross-Site Scripting
CVE-2006-2397—webappsphp13 may 2006
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'diapo.php?rep' Cross-Site Scripting
CVE-2006-2397—webappsphp13 may 2006
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'index.php?rep' Traversal Arbitrary Directory Listing
CVE-2006-2398—webappsphp13 may 2006
Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary file
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'index.php?rep' Cross-Site Scripting
CVE-2006-2397—webappsphp13 may 2006
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Foing 0.7.0 - 'phpBB' Remote File Inclusion
CVE-2006-2507—webappsphp12 may 2006
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow r
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - '/NmConsole/ToolResults.asp?sHostname' Cross-Site Scripting
CVE-2006-2351—remoteasp12 may 2006
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - '/NmConsole/Navigation.asp?sDeviceView' Cross-Site Scripting
CVE-2006-2351—remoteasp12 may 2006
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OZJournals 1.2 - 'Vname' Cross-Site Scripting
CVE-2006-2390—webappsphp12 may 2006
Cross-site scripting (XSS) vulnerability in OZJournals 1.2 allows remote attackers to inject arbitrary web script or HTM
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB 2.0.20 - Unauthorized HTTP Proxy
CVE-2006-4450—webappsphp12 may 2006
usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB Chart Mod 1.1 - 'charts.php?id' Cross-Site Scripting
CVE-2006-2359—webappsphp11 may 2006
Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion
CVE-2006-2406—webappsphp11 may 2006
Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier ve
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion
CVE-2006-2405—webappsphp11 may 2006
Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, wh
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Geeklog 1.4 - Multiple Input Validation Vulnerabilities
CVE-2006-2699—webappsphp11 may 2006
Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inje
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Vizra - 'A_Login.php' Cross-Site Scripting
CVE-2006-2365—webappsphp11 may 2006
Cross-site scripting (XSS) vulnerability in a_login.php in Vizra allows remote attackers to inject arbitrary web script
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB Chart Mod 1.1 - 'charts.php?id' SQL Injection
CVE-2006-2360—webappsphp11 may 2006
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GNU BinUtils 2.1x - Buffer Overflow
CVE-2006-2362HIGHdoslinux11 may 2006
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU
46RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage
CVE-2006-2341—remotemultiple10 may 2006
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being us
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Path Conversion
CVE-2006-2334—remotewindows10 may 2006
The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EDirectoryPro - 'Search_result.asp' SQL Injection
CVE-2006-2296—webappsasp09 may 2006
SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ISPConfig 2.2.2/2.2.3 - 'Session.INC.php' Remote File Inclusion
CVE-2006-2315—webappsphp09 may 2006
PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Infotech Storage Library - Heap Corruption
CVE-2006-2297—doswindows09 may 2006
Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to exe
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EImagePro - 'view.asp?Pic' SQL Injection
CVE-2006-2300—webappsphp09 may 2006
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MyBB 1.1.1 - 'showthread.php' SQL Injection
CVE-2006-2336—webappsphp09 may 2006
SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MultiCalendars 3.0 - 'All_calendars.asp' SQL Injection
CVE-2006-2293—webappsasp09 may 2006
SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EImagePro - 'subList.asp?CatID' SQL Injection
CVE-2006-2300—webappsasp09 may 2006
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EPublisherPro 0.9.7 - 'Moreinfo.asp' Cross-Site Scripting
CVE-2006-2306—webappsasp09 may 2006
Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗
← anteriorpágina 423 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.