Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.713exploits catalogados
39.298CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
PHPMyInventory 2.8 - 'global.inc.php' Remote File Inclusion
CVE-2007-3270—webappsphp
PHP remote file inclusion vulnerability in Includes/global.inc.php in phpMyInventory 2.8 allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Arab Portal 2.1 (Windows) - Remote File Disclosure
CVE-2008-5787—webappsphp
Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary fil
23RIESGO
abrir ↗
Referência✓ VexDay Proof
UltraISO 9.3.3.2685 - CCD/IMG Universal Buffer Overflow
CVE-2009-1257—localwindows
Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash
28RIESGO
abrir ↗
Referência✓ VexDay Proof
ShoutPro 1.5.2 - 'shout.php' Remote Code Injection
CVE-2007-2141—webappsphp
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary
35RIESGO
abrir ↗
Referência✓ VexDay Proof
WebSVN 2.0 - Cross-Site Scripting / File Handling / Code Execution
CVE-2008-5920—webappsphp
The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a craft
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Segue CMS 1.8.4 - 'index.php' Remote File Inclusion
CVE-2007-5186—webappsphp
PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled,
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Mosaic Commerce - 'cid' SQL Injection
CVE-2008-4599—webappsphp
SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service
CVE-2007-5219—doswindows
Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLA
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Supasite 1.23b - Multiple Remote File Inclusions
CVE-2007-2185—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Foxit Reader 2.0 - 'PDF' Remote Denial of Service
CVE-2007-2186—doswindows
Foxit Reader 2.0 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Dart Communications PowerTCP FTP module - Remote Buffer Overflow
CVE-2008-4652—remotewindows
Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remo
28RIESGO
abrir ↗
Referência✓ VexDay Proof
ASX to MP3 Converter - '.m3u' Local Stack Overflow (PoC)
CVE-2009-1324—doswindows
Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary cod
28RIESGO
abrir ↗
Referência✓ VexDay Proof
MODx CMS 0.9.2.1 - 'FCKeditor' Remote File Inclusion
CVE-2006-5730—webappsphp
PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Durian Web Application Server 3.02 - Remote Buffer Overflow
CVE-2006-6853—remotewindows
Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpEventCalendar 0.2.3 - 'eventdisplay.php' SQL Injection
CVE-2007-3519—webappsphp
SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eLineStudio Site Composer (ESC) 2.6 - Multiple Vulnerabilities
CVE-2008-2861—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
pPIM 1.0 - Arbitrary File Delete / Cross-Site Scripting
CVE-2008-4425—webappsphp
Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ClaSS 0.8.60 - 'export.php' Local File Inclusion
CVE-2008-5856—webappsphp
Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component MMP 1.2 - Remote File Inclusion
CVE-2006-4203—webappsphp
PHP remote file inclusion vulnerability in help.mmp.php in the MMP Component (com_mmp) 1.2 and earlier for Mambo allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Keller Web Admin CMS 0.94 Pro - Local File Inclusion (1)
CVE-2008-6734—webappsphp
Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to includ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AEP SmartGate 4.3b - 'GET' Arbitrary File Download
CVE-2006-5596—remotewindows
Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Max.Blog 1.0.6 - Arbitrary Delete Post
CVE-2009-0383—webappsphp
delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog p
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EasyNews PRO News Publishing 4.0 - Password Disclosure
CVE-2006-6866—webappsphp
STphp EasyNews PRO 4.0 stores sensitive information under the web root with insufficient access control, which allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Adobe Photoshop CS2 / CS3 - '.bmp' Local Buffer Overflow
CVE-2007-2244—localwindows
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attac
35RIESGO
abrir ↗
Referência✓ VexDay Proof
WWWISIS 7.1 - 'IsisScript' Local File Disclosure / Cross-Site Scripting
CVE-2007-5484—webappscgi
Directory traversal vulnerability in wxis.exe in WWWISIS 7.1 allows local users to read arbitrary files via a .. (dot do
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CMScout 2.05 - 'bit' Local File Inclusion
CVE-2008-3415—webappsphp
Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
openEngine 2.0 beta2 - Remote File Inclusion
CVE-2008-4719—webappsphp
PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register_gl
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Advanced Webhost Billing System (AWBS) 2.4.0 - 'cart2.php' Remote File Inclusion
CVE-2007-2272—webappsphp
PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.0
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sendcard 3.4.1 - Local File Inclusion / Remote Code Execution
CVE-2007-3082—webappsphp
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPDJ 0.5 - 'djpage.php' Remote File Inclusion
CVE-2007-5574—webappsphp
PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code
28RIESGO
abrir ↗
← anteriorpágina 59 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.