Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.266 exploits
Referência✓ VexDay Proof
PozScripts Classified Ads Script - 'cid' SQL Injection
CVE-2008-3673—webappsphp
SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2010-0800
CVE-2010-0800—
SQL injection vulnerability in the Ossolution Team Documents Seller (aka DMS) (com_dms) component 2.5.1 for Joomla! allo
23RIESGO
abrir ↗
Referência
CVE-2016-8641
CVE-2016-8641MEDIUM
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary fil
33RIESGO
abrir ↗
Referência
CVE-2016-10031
CVE-2016-10031—
WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYS
23RIESGO
abrir ↗
Referência
CVE-2016-10031
CVE-2016-10031—
WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYS
23RIESGO
abrir ↗
Referência
CVE-2010-1716
CVE-2010-1716—
SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2010-2624
CVE-2010-2624—
Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2022-46966
CVE-2022-46966CRITICAL
Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.
48RIESGO
abrir ↗
Referência
CVE-2010-2719
CVE-2010-2719—
SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2010-4783
CVE-2010-4783—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when ma
23RIESGO
abrir ↗
Referência
CVE-2017-1274
CVE-2017-1274—
IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DELTAScripts PHP Classifieds 7.5 - Authentication Bypass
CVE-2008-5806—webappsphp
SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2010-1529
CVE-2010-1529—
SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2010-1529
CVE-2010-1529—
SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting
CVE-2007-3447—webappsphp
SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência
CVE-2012-10026
CVE-2012-10026CRITICAL
WordPress Plugin Asset-Manager <= 2.0 PHP File Upload
63RIESGO
abrir ↗
Referência
CVE-2012-10026
CVE-2012-10026CRITICAL
WordPress Plugin Asset-Manager <= 2.0 PHP File Upload
63RIESGO
abrir ↗
Referência
CVE-2012-10026
CVE-2012-10026CRITICAL
WordPress Plugin Asset-Manager <= 2.0 PHP File Upload
63RIESGO
abrir ↗
Referência
CVE-2012-10026
CVE-2012-10026CRITICAL
WordPress Plugin Asset-Manager <= 2.0 PHP File Upload
63RIESGO
abrir ↗
Referência
CVE-2017-12930
CVE-2017-12930—
SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users
23RIESGO
abrir ↗
Referência
CVE-2010-4793
CVE-2010-4793—
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-4793
CVE-2010-4793—
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2010-3891
CVE-2010-3891—
Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind En
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Blog System 1.x - 'index.php?news_id' SQL Injection
CVE-2007-3979—webappsphp
SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to execu
23RIESGO
abrir ↗
Referência
CVE-2010-4794
CVE-2010-4794—
Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TinyWebGallery 1.5 - 'image' Remote File Inclusion
CVE-2006-4166—webappsphp
PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗
Referência
CVE-2009-20006
CVE-2009-20006CRITICAL
osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
63RIESGO
abrir ↗
Referência
CVE-2009-20006
CVE-2009-20006CRITICAL
osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
63RIESGO
abrir ↗
Referência
CVE-2009-20006
CVE-2009-20006CRITICAL
osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
63RIESGO
abrir ↗
Referência
CVE-2022-46967
CVE-2022-46967CRITICAL
An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admi
48RIESGO
abrir ↗
← anteriorpágina 426 / 743siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.