Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.866exploits catalogados

35.812CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientes populares riesgo

24.458 exploits

Exploit-DB✓ VexDay Proof

ShoutLIVE 1.1.0 - 'savesettings.php' Remote Code Execution

CVE-2006-0940—webappsphp18 mar 2006

Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to e

23RIESGO

Exploit-DB✓ VexDay Proof

Woltlab Burning Board 2.3.4 - 'Class_DB_MySQL.php' Cross-Site Scripting

CVE-2006-1324—webappsphp18 mar 2006

Cross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remot

23RIESGO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Print Action 't' Cross-Site Scripting

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RIESGO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Mail Action 'MID' Cross-Site Scripting

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RIESGO

Exploit-DB✓ VexDay Proof

Invision Power Services Invision Board 2.0.4 - Members Action Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RIESGO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Calendar Action Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RIESGO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Search Action Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RIESGO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - Help Action 'HID' Cross-Site Scripting

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RIESGO

Exploit-DB✓ VexDay Proof

Invision Power Board (IP.Board) 2.0.4 - 'index.php?st' Cross-Site Scripting

CVE-2006-1326—webappsphp17 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 5.0.1 - Script Action Handler Buffer Overflow

CVE-2006-1245—doswindows16 mar 2006

Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote a

35RIESGO

Exploit-DB

Zoo 2.10 - Parse.c Local Buffer Overflow

CVE-2006-1269—doslinux16 mar 2006

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long

23RIESGO

Exploit-DB✓ VexDay Proof

phpMyAdmin 2.8.1 - Set_Theme Cross-Site Scripting

CVE-2006-1258—webappsphp16 mar 2006

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script or

23RIESGO

Exploit-DB✓ VexDay Proof

Oxynews - 'index.php' SQL Injection

CVE-2006-1271—webappsphp16 mar 2006

SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the ox

23RIESGO

Exploit-DB✓ VexDay Proof

DSDownload 1.0 - Multiple SQL Injections

CVE-2006-1232—webappsphp15 mar 2006

Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to exec

23RIESGO

Exploit-DB✓ VexDay Proof

DSCounter 1.2 - 'index.php' SQL Injection

CVE-2006-1234—webappsphp14 mar 2006

SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to ex

23RIESGO

Exploit-DB✓ VexDay Proof

GGZ Gaming Zone 0.0.12 - Multiple Denial of Service Vulnerabilities

CVE-2006-1275—dosmultiple14 mar 2006

GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Windows - Telephony Service Command Execution (MS05-040)

CVE-2005-0058—localwindows14 mar 2006

Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windo

35RIESGO

Exploit-DB✓ VexDay Proof

ENet - Multiple Denial of Service Vulnerabilities

CVE-2006-1194—dosmultiple13 mar 2006

Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS versi

23RIESGO

Exploit-DB✓ VexDay Proof

Firebird 1.5 - Inet_Server Local Buffer Overflow

CVE-2006-1240—doswindows13 mar 2006

Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to g

23RIESGO

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.4.5 Mail.app - Real Name Buffer Overflow

CVE-2006-0396—remoteosx13 mar 2006

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote a

28RIESGO

Exploit-DB✓ VexDay Proof

Ubuntu 5.10 Installer - Password Disclosure

CVE-2006-1183—locallinux12 mar 2006

The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the

23RIESGO

Exploit-DB✓ VexDay Proof

Jupiter CMS 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1223—webappsphp11 mar 2006

Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject

23RIESGO

Exploit-DB✓ VexDay Proof

vCard 2.8/2.9 - 'create.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1230—webappsphp11 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrar

23RIESGO

Exploit-DB✓ VexDay Proof

WMNews - 'footer.php?ctrrowcol' Cross-Site Scripting

CVE-2006-1233—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or H

23RIESGO

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1196—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RIESGO

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'recentchanges.php?help' Cross-Site Scripting

CVE-2006-1196—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RIESGO

Exploit-DB✓ VexDay Proof

Core News 2.0.1 - 'index.php' Remote Code Execution

CVE-2006-1212—webappsphp10 mar 2006

Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via

23RIESGO

Exploit-DB✓ VexDay Proof

WMNews - 'wmcomments.php?ArtID' Cross-Site Scripting

CVE-2006-1233—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or H

23RIESGO

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'pageindex.php?help' Cross-Site Scripting

CVE-2006-1196—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RIESGO

Exploit-DB✓ VexDay Proof

QwikiWiki 1.4/1.5 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1196—webappsphp10 mar 2006

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scri

23RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.