Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.453exploits catalogados

35.554CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4287Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.367 exploits

Referência✓ VexDay Proof

WordPress Plugin Adserve 0.2 - 'adclick.php' SQL Injection

CVE-2008-0507—webappsphp

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute ar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_newsletter' 4.5 - 'listid' SQL Injection

CVE-2008-0510—webappsphp

SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows r

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_mamml' - 'listid' SQL Injection

CVE-2008-0511—webappsphp

SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla! allows remote attacker

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_fq' - 'listid' SQL Injection

CVE-2008-0512—webappsphp

SQL injection vulnerability in index.php in the fq (com_fq) component for Mambo and Joomla! allows remote attackers to e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_glossary' 2.0 - 'catid' SQL Injection

CVE-2008-0514—webappsphp

SQL injection vulnerability in index.php in the Glossary (com_glossary) 2.0 component for Mambo and Joomla! allows remot

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component EstateAgent 0.1 - SQL Injection

CVE-2008-0517—webappsphp

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Recipes 1.00 - 'id' SQL Injection

CVE-2008-0518—webappsphp

SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component jokes 1.0 - 'cat' SQL Injection

CVE-2008-0519—webappsphp

SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo and Joomla! allows remo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpIP 4.3.2 - Multiple SQL Injections

CVE-2008-0538—webappsphp

Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Simple Forum 3.2 - File Disclosure / Cross-Site Scripting

CVE-2008-0541—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in forum.php in Gerd Tentler Simple Forum 3.2 allow remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Bubbling Library 1.32 - Multiple Local File Inclusions

CVE-2008-0545—webappsphp

Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to include and execute arbi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Sejoong Namo ActiveSquare 6 - 'NamoInstaller.dll' install Method

CVE-2008-0551—remotewindows

The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong N

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_akogallery' 2.5b - SQL Injection

CVE-2008-0561—webappsphp

SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta component for Mambo an

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Restaurant 1.0 - SQL Injection

CVE-2008-0562—webappsphp

SQL injection vulnerability in index.php in the Restaurant (com_restaurant) 1.0 component for Mambo and Joomla! allows r

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Rapid Recipe 1.6.5 - SQL Injection

CVE-2008-0831—webappsphp

Multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 and earlier component for Joomla! all

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Ricette 1.0 - SQL Injection

CVE-2008-0841—webappsphp

SQL injection vulnerability in index.php in the Giorgio Nordo Ricette (com_ricette) 1.0 component for Joomla! and Mambo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component MCQuiz 0.9 Final - 'tid' SQL Injection

CVE-2008-0800—webappsphp

SQL injection vulnerability in index.php in the McQuiz (com_mcquiz) 0.9 Final component for Joomla! allows remote attack

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component paxxgallery 0.2 - 'iid' SQL Injection

CVE-2008-0801—webappsphp

SQL injection vulnerability in index.php in the PAXXGallery (com_paxxgallery) 0.2 component for Mambo and Joomla! allow

23RIESGO

abrir ↗

Referência✓ VexDay Proof

LookStrike Lan Manager 0.9 - Local/Remote File Inclusion

CVE-2008-0803—webappsphp

Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbit

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion

CVE-2008-0804—remotehardware

PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to exec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 1.62 - Multiple SQL Injections

CVE-2008-0811—webappsphp

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1)

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_clasifier - 'cat_id' SQL Injection

CVE-2008-0842—webappsphp

SQL injection vulnerability in index.php in the Classifier (com_clasifier) component for Joomla! allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XPWeb 3.3.2 - 'url' Remote File Disclosure

CVE-2008-0813—webappsphp

Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote atta

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_pccookbook - 'user_id' SQL Injection

CVE-2008-0844—webappsphp

SQL injection vulnerability in index.php in the PccookBook (com_pccookbook) component for Joomla! allows remote attacker

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board 3.0.x - Blind SQL Injection

CVE-2008-0857—webappsphp

SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Sun Solaris 10 - snoop(1M) Utility Remote Command Execution

CVE-2008-0964—remotesolaris

Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o op

28RIESGO

abrir ↗

Referência✓ VexDay Proof

PORAR WebBoard - 'question.asp' SQL Injection

CVE-2008-1039—webappsasp

SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Download Manager 1.1 - Local File Inclusion

CVE-2008-1042—webappsphp

Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allow

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPUserBase 1.3b - 'unverified.inc.php' Remote File Inclusion

CVE-2008-1043—webappsphp

PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BE

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Quinsonnas Mail Checker 1.55 - 'footer.php' Remote File Inclusion

CVE-2008-1046—webappsphp

PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.