Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.137exploits catalogados
35.961CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
22.640 exploits
Referência✓ VexDay Proof
PHP weather 2.2.2 - Local File Inclusion / Cross-Site Scripting
CVE-2008-5771—webappsphp
Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2009-4628
CVE-2009-4628—
SQL injection vulnerability in the TemplatePlaza.com TPDugg (com_tpdugg) component 1.1 for Joomla! allows remote attacke
23RIESGO
abrir ↗
Referência
CVE-2010-1058
CVE-2010-1058—
Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_g
23RIESGO
abrir ↗
Referência
CVE-2010-1058
CVE-2010-1058—
Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_g
23RIESGO
abrir ↗
Referência
CVE-2020-15046
CVE-2020-15046—
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2015-4624
CVE-2015-4624—
Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.
50RIESGO
abrir ↗
Referência✓ VexDay Proof
BNCwi 1.04 - Local File Inclusion
CVE-2008-5948—webappsphp
Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wotw 5.0 - Local/Remote File Inclusion
CVE-2008-6224—webappsphp
Directory traversal vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Telephone Directory 2008 - Arbitrary Delete Contact
CVE-2008-7180—webappsphp
del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request wit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ClipShare 2.6 - Remote User Password Change
CVE-2008-7188—webappsphp
ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the pr
23RIESGO
abrir ↗
Referência
CVE-2010-2973
CVE-2010-2973—
Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload
CVE-2008-1507—webappsphp
PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@pe
23RIESGO
abrir ↗
Referência
CVE-2009-3756
CVE-2009-3756—
phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.p
23RIESGO
abrir ↗
Referência
CVE-2013-1414
CVE-2013-1414—
Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.
23RIESGO
abrir ↗
Referência
CVE-2015-4684
CVE-2015-4684—
Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) re
23RIESGO
abrir ↗
Referência
CVE-2012-1021
CVE-2012-1021—
Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arb
23RIESGO
abrir ↗
Referência
CVE-2012-6040
CVE-2012-6040—
Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2011-5108
CVE-2011-5108—
Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
KubeLance 1.6.4 - 'ipn.php' Local File Inclusion
CVE-2008-2091—webappsphp
Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpinv 0.8.0 - Local File Inclusion / Cross-Site Scripting
CVE-2008-2695—webappsphp
Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FireAnt 1.3 - 'index.php' Local File Inclusion
CVE-2008-2896—webappsphp
Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary l
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LanSuite 3.3.2 - 'design' Local File Inclusion
CVE-2008-4330—webappsphp
Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Globsy 1.0 - Remote File Rewriting
CVE-2008-5966—webappsphp
globsy_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Scriptsez Mini Hosting Panel - 'members.php' Local File Inclusion
CVE-2008-6090—webappsphp
Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection
CVE-2008-6407—webappsphp
Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ol BookMarks Manager 0.7.5 - Local File Inclusion
CVE-2008-6410—webappsphp
Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to inclu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component live chat - SQL Injection / Open Proxy
CVE-2008-6882—webappsphp
Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Libra PHP File Manager 1.18 - Insecure Cookie Handling
CVE-2008-7027—webappsphp
Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PAD Site Scripts 3.6 - Arbitrary Database Backup
CVE-2009-1941—webappsphp
PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VT-Auth 1.0 - 'zHk8dEes3.txt' File Disclosure
CVE-2009-2024—webappsasp
Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which a
23RIESGO
abrir ↗
← anteriorpágina 636 / 755siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.