Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.165exploits catalogados

40.552CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.077VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.327 exploits

Referência✓ VexDay Proof

DigiLeave 1.2 - 'book_id' Blind SQL Injection

CVE-2008-3309—webappsasp

SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ZEELYRICS 2.0 - 'bannerclick.php' SQL Injection

CVE-2008-4717—webappsphp

SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2008-4344

CVE-2008-4344—

SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the Ca

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BluSky CMS - 'news_id' SQL Injection

CVE-2009-1548—webappsphp

SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the

23RIESGO

abrir ↗

Referência

CVE-2011-2523

CVE-2011-2523—

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RIESGO

abrir ↗

Referência

CVE-2012-1778

CVE-2012-1778—

SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência

CVE-2010-4996

CVE-2010-4996—

SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbi

23RIESGO

abrir ↗

Referência

CVE-2017-14311

CVE-2017-14311—

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402

23RIESGO

abrir ↗

Referência

CVE-2010-4144

CVE-2010-4144—

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL comman

23RIESGO

abrir ↗

Referência

CVE-2011-5112

CVE-2011-5112—

SQL injection vulnerability in Alameda (com_alameda) component before 1.0.1 for Joomla! allows remote attackers to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Adobe Shockwave - 'ShockwaveVersion()' Stack Overflow (PoC)

CVE-2007-5941—doswindows

Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a den

35RIESGO

abrir ↗

Referência✓ VexDay Proof

X.Org xorg-server 1.1.1-48.13 - Probe for Files (PoC)

CVE-2007-5958—dosmultiple

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in t

23RIESGO

abrir ↗

Referência

CVE-2024-6459

CVE-2024-6459CRITICAL

News Element Elementor Blog Magazine < 1.0.6 - Unauthenticated LFI

48RIESGO

abrir ↗

Referência

CVE-2008-3725

CVE-2008-3725—

SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection

CVE-2009-1032—webappsphp

SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attacke

23RIESGO

abrir ↗

Referência

CVE-2009-2341

CVE-2009-2341—

SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência

CVE-2009-3357

CVE-2009-3357—

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for

23RIESGO

abrir ↗

Referência

CVE-2009-4428

CVE-2009-4428—

SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla! allows remote attackers

23RIESGO

abrir ↗

Referência

CVE-2010-2923

CVE-2010-2923—

SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote attackers to execute ar

23RIESGO

abrir ↗

Referência

CVE-2010-2923

CVE-2010-2923—

SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote attackers to execute ar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Toko Instan 7.6 - Multiple SQL Injections

CVE-2007-6004—webappsphp

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Symantec BackupExec Calendar Control - 'PVCalendar.ocx' Remote Buffer Overflow

CVE-2007-6016—remotewindows

Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the schedul

50RIESGO

abrir ↗

Referência✓ VexDay Proof

Active Force Matrix 2 - Authentication Bypass

CVE-2008-5634—webappsasp

SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência

CVE-2017-15806

CVE-2017-15806—

The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the s

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Ktools Photostore 3.5.1 - 'gid' SQL Injection

CVE-2008-6647—webappsphp

SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Tiger Dms - Authentication Bypass

CVE-2009-1503—webappsphp

Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MaxCMS 2.0 - 'm_username' Arbitrary Create Admin

CVE-2009-1818—webappsphp

SQL injection vulnerability in admin/admin_manager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência

CVE-2009-2402

CVE-2009-2402—

SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute a

23RIESGO

abrir ↗

Referência

CVE-2010-4925

CVE-2010-4925—

SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2016-1593

CVE-2016-1593—

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remot

50RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.