Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.866exploits catalogados
35.812CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
24.455 exploits
Exploit-DB✓ VexDay Proof
SoftBiz Image Gallery - 'insert_rating.php?img_id' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RedCMS 0.1 - 'login.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RedCMS 0.1 - 'profile.php?u' SQL Injection
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteSearch Indexer 3.5 - 'searchresults.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in searchresults.asp in SiteSearch Indexer 3.5 and earlier allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Blank'N'Berg 0.2 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RedCMS 0.1 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zdaemon 1.8.1 - Multiple Vulnerabilities
The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Claroline 1.x - 'rqmkhtml.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MediaSlash Gallery - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in MediaSlash Gallery allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
X-Changer 0.20 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
O2PHP Oxygen 1.0/1.1 - 'post.php' SQL Injection
SQL injection vulnerability in post.php in Oxygen 1.1.3 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VNews 1.2 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PhxContacts 0.93 - 'carnet.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to exec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x/5.x - 'Html_Entity_Decode()' Information Disclosure
PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PhxContacts 0.93 - 'contact_view.php?id_contact' SQL Injection
Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to exec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PhxContacts 0.93 - 'login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ClassifiedZONE 1.2 - 'Accountlogon.cfm' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in accountlogon.cfm in classifiedZONE 1.2 and earlier allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RealPlayer 10.5 (6.0.12.1040-1348) - SWF Buffer Overflow (PoC)
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Playe
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OneOrZero 1.6.3 Helpdesk - 'index.php' SQL Injection
SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CONTROLzx Hms 3.3.4 - 'dedicated_order.php?dedicatedPlanID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPCOIN 1.2 - 'mod.php?fs' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RealestateZONE 4.2 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPCOIN 1.2 - 'mod_print.php?fs' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Connect Daily 3.2.8/3.2.9 - 'ViewSearch.html' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Connect Daily 3.2.8/3.2.9 - 'ViewWeek.html?week' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CONTROLzx Hms 3.3.4 - 'server_management.php?plan_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Connect Daily 3.2.8/3.2.9 - 'ViewDay.html' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Connect Daily 3.2.8/3.2.9 - 'ViewCal.html?item_type_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Arab Portal 2.0 - 'online.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0 (aka Arab Dynamic Portal or ADP) stable allow rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FusionZONE CouponZONE 4.2 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject arb
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.