Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.302exploits catalogados

35.469CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientes populares riesgo

24.451 exploits

Exploit-DB✓ VexDay Proof

Sun Solaris 10 - rpc.ypupdated Remote Code Execution (Metasploit)

CVE-1999-0209—remotesolaris04 abr 2008

The SunView (SunTools) selection_svc facility allows remote users to read files.

50RIESGO

Exploit-DB✓ VexDay Proof

Joomla! / Mambo Component Showroom Joomlearn LMS - 'cat' SQL Injection

CVE-2008-4777—webappsphp03 abr 2008

SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attack

23RIESGO

Exploit-DB✓ VexDay Proof

Opera Web Browser 9.26 - Multiple Vulnerabilities

CVE-2008-1762—doslinux03 abr 2008

Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a

23RIESGO

Exploit-DB✓ VexDay Proof

Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery

CVE-2008-6479—webappsphp03 abr 2008

Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallels

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)

CVE-2008-0250—doswindows03 abr 2008

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St

28RIESGO

Exploit-DB✓ VexDay Proof

Parallels Virtuozzo Containers 3.0.0-25.4/4.0.0-365.6 VZPP Interface File Manger - Cross-Site Request Forgery

CVE-2008-6478—webappsphp03 abr 2008

Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 36

23RIESGO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'admin.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RIESGO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'stats.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RIESGO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'show.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RIESGO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'sess.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RIESGO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'resize.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RIESGO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'index.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RIESGO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'detail.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RIESGO

Exploit-DB✓ VexDay Proof

EasySite 2.0 - 'browser.php' Remote File Inclusion

CVE-2008-6196—webappsphp02 abr 2008

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar

23RIESGO

Exploit-DB✓ VexDay Proof

LANDesk Management Suite 8.80.1.1 - PXE TFTP Service Directory Traversal

CVE-2008-6195—remotelinux02 abr 2008

Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and

23RIESGO

Exploit-DB✓ VexDay Proof

EasySite 2.0 - 'skin_chooser.php' Remote File Inclusion

CVE-2008-6196—webappsphp02 abr 2008

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar

23RIESGO

Exploit-DB✓ VexDay Proof

DivXDB 2002 0.94b - Multiple Cross-Site Scripting Vulnerabilities

CVE-2008-1800—webappsphp02 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject a

23RIESGO

Exploit-DB✓ VexDay Proof

EasySite 2.0 - 'image_editor.php' Remote File Inclusion

CVE-2008-6196—webappsphp02 abr 2008

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar

23RIESGO

Exploit-DB✓ VexDay Proof

Terracotta - 'index.php' Local File Inclusion

CVE-2008-6522—webappsphp01 abr 2008

Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka Op

23RIESGO

Exploit-DB✓ VexDay Proof

Jack (tR) Jax LinkLists 1.00 - 'jax_linklists.php' Cross-Site Scripting

CVE-2008-6562—webappsphp31 mar 2008

Cross-site scripting (XSS) vulnerability in jax_linklists.php in Jack (tR) Jax LinkLists 1.00 allows remote attackers to

23RIESGO

Exploit-DB✓ VexDay Proof

Jax Guestbook 3.31/3.50 - 'jax_Guestbook.php' Cross-Site Scripting

CVE-2005-4879—webappsphp31 mar 2008

Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote atta

23RIESGO

Exploit-DB✓ VexDay Proof

@lex Guestbook 4.0.5 - 'index.php?test' Cross-Site Scripting

CVE-2008-7140—webappsphp31 mar 2008

Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject

23RIESGO

Exploit-DB✓ VexDay Proof

@lex Guestbook 4.0.5 - 'setup.php?language_setup' Cross-Site Scripting

CVE-2008-7140—webappsphp31 mar 2008

Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject

23RIESGO

Exploit-DB✓ VexDay Proof

@lex Poll 1.2 - 'setup.php' Cross-Site Scripting

CVE-2008-7141—webappsphp31 mar 2008

Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web s

23RIESGO

Exploit-DB✓ VexDay Proof

PHPGKit 0.9 - 'connexion.php' Remote File Inclusion

CVE-2008-6491—webappsphp31 mar 2008

PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers to execute arbitrary PHP

23RIESGO

Exploit-DB✓ VexDay Proof

SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service / Memory Corruption Vulnerabilities

CVE-2008-1690—doswindows31 mar 2008

WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of se

23RIESGO

Exploit-DB✓ VexDay Proof

EfesTECH Video 5.0 - 'catID' SQL Injection

CVE-2008-1641—webappsasp31 mar 2008

SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL comman

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Office XP SP3 - '.PPT' File Buffer Overflow (MS08-016)

CVE-2008-0118—localwindows30 mar 2008

Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 f

35RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Office XP SP3 - '.PPT' File Buffer Overflow (MS08-016)

CVE-2008-0113—localwindows30 mar 2008

Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execu

35RIESGO

Exploit-DB✓ VexDay Proof

2X ThinClientServer 5.0 sp1-r3497 TFTP Service - Directory Traversal

CVE-2008-1620—remotewindows29 mar 2008

Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r349

23RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.