Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência✓ VexDay Proof
SazCart 1.5.1 - Multiple Remote File Inclusions
CVE-2008-2224—webappsphp
Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when register_globals is enabled, allow remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ESET Smart Security 3.0.667.0 - Privilege Escalation (PoC)
CVE-2008-7107—doswindows
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service (crash) via a crafted IOCTL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebEyes Guest Book 3 - 'yorum.asp?mesajid' SQL Injection
CVE-2009-1950—webappsasp
SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2010-1351
CVE-2010-1351—
Multiple PHP remote file inclusion vulnerabilities in Nodesforum 1.033 and 1.045, when register_globals is enabled, allo
23RIESGO
abrir ↗
Referência
CVE-2010-4507
CVE-2010-4507—
Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 a
23RIESGO
abrir ↗
Referência
CVE-2010-1945
CVE-2010-1945—
Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, all
23RIESGO
abrir ↗
Referência
CVE-2023-3897
CVE-2023-3897MEDIUM
Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page
33RIESGO
abrir ↗
Referência
CVE-2024-25003
CVE-2024-25003HIGH
KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insuf
41RIESGO
abrir ↗
Referência
CVE-2024-25003
CVE-2024-25003HIGH
KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insuf
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Alstrasoft e-Friends 4.21 - Admin Session Retrieve
CVE-2007-2824—webappsphp
SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Excel 2000/2003 - Sheet Name (PoC)
CVE-2007-3490—doswindows
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Interact 2.4.1 - Multiple Remote File Inclusions
CVE-2008-2220—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when regis
23RIESGO
abrir ↗
Referência✓ VexDay Proof
cmsWorks 2.2 RC4 - 'mod_root' Remote File Inclusion
CVE-2008-2877—webappsphp
PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when register_globals is en
23RIESGO
abrir ↗
Referência
CVE-2010-5048
CVE-2010-5048—
Cross-site scripting (XSS) vulnerability in admin.jcomments.php in the JoomlaTune JComments (com_jcomments) component 2.
23RIESGO
abrir ↗
Referência
CVE-2012-2938
CVE-2012-2938—
Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2012-5700
CVE-2012-5700—
Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência
CVE-2010-2138
CVE-2010-2138—
Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute a
23RIESGO
abrir ↗
Referência
CVE-2015-2999
CVE-2015-2999—
Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2016-1077
CVE-2016-1077—
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acro
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Free Hosting Manager 1.2/2.0 - Insecure Cookie Handling
CVE-2008-3557—webappsphp
Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by sett
23RIESGO
abrir ↗
Referência✓ VexDay Proof
iFdate 2.0.3 - SQL Injection
CVE-2008-7114—webappsphp
SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2010-1858
CVE-2010-1858—
Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote atta
43RIESGO
abrir ↗
Referência
CVE-2017-0147
CVE-2017-0147HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2017-15966
CVE-2017-15966—
The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parame
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Buddy Zone 1.5 - Multiple SQL Injections
CVE-2007-3526—webappsphp
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2007-3529
CVE-2007-3529—
videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Collabtive 0.4.8 - Cross-Site Scripting / Authentication Bypass / Arbitrary File Upload
CVE-2008-6949—webappsphp
Multiple cross-site request forgery (CSRF) vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the auth
23RIESGO
abrir ↗
Referência
CVE-2010-1980
CVE-2010-1980—
Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla
43RIESGO
abrir ↗
Referência
CVE-2016-1104
CVE-2016-1104—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Podcast Generator 1.1 - Remote Code Execution
CVE-2009-1230—webappsphp
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated admini
23RIESGO
abrir ↗
← anteriorpágina 464 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.