Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

24.488 exploits

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp2.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 sep 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RIESGO

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp1.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 sep 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RIESGO

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp3.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 sep 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RIESGO

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp2.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 sep 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RIESGO

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/admin/admin.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 sep 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RIESGO

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp3.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 sep 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RIESGO

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp0.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 sep 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RIESGO

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/admin/log.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 sep 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RIESGO

Exploit-DB✓ VexDay Proof

SQL-Ledger 2.6.x/LedgerSMB 1.0 - 'Terminal' Directory Traversal

CVE-2006-4731—webappscgi12 sep 2006

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) Le

23RIESGO

Exploit-DB✓ VexDay Proof

PHProg 1.0 - 'index.php?lang' Traversal Arbitrary File Access

CVE-2006-4753—webappsphp11 sep 2006

Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via

23RIESGO

Exploit-DB✓ VexDay Proof

PhpLinkExchange 1.0 - Include / Cross-Site Scripting

CVE-2006-4742—webappsphp11 sep 2006

Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inje

23RIESGO

Exploit-DB✓ VexDay Proof

PHProg 1.0 - 'index.php?album' Cross-Site Scripting

CVE-2006-4754—webappsphp11 sep 2006

Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary w

23RIESGO

Exploit-DB✓ VexDay Proof

Mercur MailServer 5.0 SP3 - 'IMAP' Remote Buffer Overflow (2)

CVE-2006-1255—remotewindows11 sep 2006

Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause

50RIESGO

Exploit-DB✓ VexDay Proof

XHP CMS 0.5.1 - 'index.php' Cross-Site Scripting

CVE-2006-4751—webappsphp11 sep 2006

Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows rem

23RIESGO

Exploit-DB✓ VexDay Proof

PhpLinkExchange 1.0 - Include / Cross-Site Scripting

CVE-2006-4741—webappsphp11 sep 2006

PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to

23RIESGO

Exploit-DB✓ VexDay Proof

Open Bulletin Board 1.0.8 - 'ROOT_PATH' File Inclusion

CVE-2006-4722—webappsphp10 sep 2006

PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to exe

23RIESGO

Exploit-DB✓ VexDay Proof

TextAds - 'error.php?error' Cross-Site Scripting

CVE-2006-4747—webappsphp09 sep 2006

Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web s

23RIESGO

Exploit-DB✓ VexDay Proof

PHP 3 < 5 - Ini_Restore() 'Safe_mode' / 'open_basedir' Restriction Bypass

CVE-2006-4625—localphp09 sep 2006

PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, su

23RIESGO

Exploit-DB✓ VexDay Proof

TextAds - 'delete.php?id' Cross-Site Scripting

CVE-2006-4747—webappsphp09 sep 2006

Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web s

23RIESGO

Exploit-DB✓ VexDay Proof

X11R6 < 6.4 XKEYBOARD (solaris x86) - Local Buffer Overflow

CVE-2006-4655—localsolaris08 sep 2006

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO

23RIESGO

Exploit-DB✓ VexDay Proof

Vikingboard 0.1 - 'topic.php' SQL Injection

CVE-2006-4709—webappsphp08 sep 2006

SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands v

23RIESGO

Exploit-DB✓ VexDay Proof

Vikingboard 0.1b - 'report.php' Cross-Site Scripting

CVE-2006-4708—webappsphp08 sep 2006

Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web s

23RIESGO

Exploit-DB✓ VexDay Proof

X11R6 < 6.4 XKEYBOARD (Solaris/SPARC) - Local Buffer Overflow (1)

CVE-2006-4655—localsolaris08 sep 2006

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO

23RIESGO

Exploit-DB✓ VexDay Proof

Vikingboard 0.1b - 'help.php' Cross-Site Scripting

CVE-2006-4708—webappsphp08 sep 2006

Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web s

23RIESGO

Exploit-DB✓ VexDay Proof

X11R6 < 6.4 XKEYBOARD (sco x86) - Local Buffer Overflow

CVE-2006-4655—localsco08 sep 2006

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO

23RIESGO

Exploit-DB✓ VexDay Proof

Sage 1.3.6 - Input Validation

CVE-2006-6919—remotemultiple08 sep 2006

Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context vi

23RIESGO

Exploit-DB✓ VexDay Proof

PHP-Fusion 6.0.x - 'news.php' SQL Injection

CVE-2006-4673—webappsphp07 sep 2006

Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on th

23RIESGO

Exploit-DB✓ VexDay Proof

PHP-Nuke Book Catalog Module 1.0 - 'upload.php' Arbitrary File Upload

CVE-2006-4666—webappsphp07 sep 2006

Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attack

23RIESGO

Exploit-DB✓ VexDay Proof

TWiki 4.0.x - 'Viewfile' Directory Traversal

CVE-2006-4294—webappsphp07 sep 2006

Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary fil

23RIESGO

Exploit-DB✓ VexDay Proof

News Evolution 3.0.3 - _NE[AbsPath] Remote File Inclusion

CVE-2006-4678—webappsphp07 sep 2006

PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code vi

23RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.