Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência✓ VexDay Proof
vhostadmin 0.1 - 'MODULES_DIR' Remote File Inclusion
CVE-2007-0558—webappsphp
PHP remote file inclusion vulnerability in modules/mail/main.php in Inter7 vHostAdmin 1.0 allows remote attackers to exe
23RIESGO
abrir ↗
Referência
CVE-2026-101262
CVE-2026-101262CRITICAL
Ziroom ZHOME A0101 set_online_client command injection
48RIESGO
abrir ↗
Referência✓ VexDay Proof
jGallery 1.3 - 'index.php' Remote File Inclusion
CVE-2007-2158—webappsphp
PHP remote file inclusion vulnerability in index.php in jGallery 1.3 allows remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Squirrelcart 1.x - 'cart.php' Remote File Inclusion
CVE-2007-4439—webappsphp
PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2026-70619
CVE-2026-70619HIGH
Odysseus Missing Admin Authorization via Embedding Endpoint Routes
41RIESGO
abrir ↗
Referência
CVE-2010-0674
CVE-2010-0674—
StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote at
23RIESGO
abrir ↗
Referência
CVE-2010-0939
CVE-2010-0939—
Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload
CVE-2008-1506—webappsphp
PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpi
23RIESGO
abrir ↗
Referência
CVE-2010-0939
CVE-2010-0939—
Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows re
23RIESGO
abrir ↗
Referência
CVE-2010-2721
CVE-2010-2721—
SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2010-2721
CVE-2010-2721—
SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2012-6048
CVE-2012-6048—
Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.
23RIESGO
abrir ↗
Referência
CVE-2010-0674
CVE-2010-0674—
StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote at
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Zomplog 3.8.2 - 'newuser.php' Arbitrary Add Admin
CVE-2008-2349—webappsphp
Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direc
23RIESGO
abrir ↗
Referência
CVE-2015-6519
CVE-2015-6519—
SQL injection vulnerability in Arab Portal 3 allows remote attackers to execute arbitrary SQL commands via the showemail
23RIESGO
abrir ↗
Referência
CVE-2015-6541
CVE-2015-6541—
Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) be
23RIESGO
abrir ↗
Referência✓ VexDay Proof
clickandemail - SQL Injection / Cross-Site Scripting
CVE-2008-5892—webappsasp
Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1)
23RIESGO
abrir ↗
Referência✓ VexDay Proof
webid 0.5.4 - Multiple Vulnerabilities
CVE-2008-7118—webappsphp
WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RM Downloader 3.0.0.9 - '.m3u' Universal Stack Overflow
CVE-2009-1326—localwindows
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a
23RIESGO
abrir ↗
Referência
CVE-2009-2263
CVE-2009-2263—
Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include a
23RIESGO
abrir ↗
Referência
CVE-2010-0765
CVE-2010-0765—
fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2017-1000371
CVE-2017-1000371—
The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! 1.5.0 Beta - 'pcltar.php' Remote File Inclusion
CVE-2007-2199—webappsphp
PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vi
35RIESGO
abrir ↗
Referência✓ VexDay Proof
ourvideo CMS 9.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
CVE-2008-2977—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
tplSoccerSite 1.0 - Multiple SQL Injections
CVE-2008-3251—webappsphp
Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
YourFreeWorld Shopping Cart - Blind SQL Injection
CVE-2008-4886—webappsphp
SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
sCssBoard (Multiple Versions) - 'pwnpack' Remote s
CVE-2008-5577—webappsphp
PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
KTP Computer Customer Database CMS 1.0 - Blind SQL Injection
CVE-2008-5952—webappsphp
SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows re
23RIESGO
abrir ↗
Referência
CVE-2012-1308
CVE-2012-1308—
Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2013-0807
CVE-2013-0807—
Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS
23RIESGO
abrir ↗
← anteriorpágina 435 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.