Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.813exploits catalogados
35.788CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
24.455 exploits
Exploit-DB✓ VexDay Proof
AzDGVote - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remote
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tritanium Bulletin Board 1.2.3 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKIT 1.6.1 R2 - 'Include.php' SQL Injection
SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simplog 0.9.2 - 's' Remote Command Execution
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SWSoft Confixx 3.1.2 - 'Jahr' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in allgemein_transfer.php in SWSoft Confixx 3.1.2 allows remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft FrontPage - Server Extensions Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ShopWeezle 2.0 - 'login.php?itemID' SQL Injection
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JBook 1.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebGallery 1.4.1 - 'picture.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x - 'tempnam() open_basedir' Restriction Bypass
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restriction
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ShopWeezle 2.0 - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Neon Responders 5.4 - Remote Clock Synchronization Denial of Service
Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service (application outage) via a craft
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Horde 3.0.9/3.1.0 - Help Viewer Remote Code Execution (Metasploit)
Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remot
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SIRE 2.0 - Arbitrary File Upload
Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to uplo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SPIP 1.8.3 - 'Spip_login.php' Remote File Inclusion
PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PH
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyForum 4.0 - 'page' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inje
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VegaDNS 0.9.9 - 'index.php?cid' SQL Injection
SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebGallery 1.4.1 - 'category.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x - 'copy() Safe_Mode' Bypass
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyForum 4.0 - 'index.php?type' CRLF Injection
CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP head
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ShopWeezle 2.0 - 'memo.php?itemID' SQL Injection
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Shadowed Portal 5.7 - 'Load.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TalentSoft Web+ Shop 5.0 - 'Deptname' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jupiter CMS 1.1.5 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.5.1 - 'Vbugs.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and earlier allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Matt Wright Guestbook 2.3.1 - Guestbook.pl Multiple HTML Injection Vulnerabilities
Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AWeb's Banner Generator 3.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tony Cook Imager 0.4x - '.JPEG' / '.TGA' Images Denial of Service
Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver CMS 1.3 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SKForum 1.x - 'area.View.action?areaID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.