Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.039exploits catalogados

39.796CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.790Exploit-DB 24.487GitHub PoC 16.910VulnCheck XDB 9820Nuclei 4504Metasploit 3528✓ solo verificadosrecientes populares riesgo

25.790 exploits

Referência✓ VexDay Proof

pNews 2.03 - 'newsid' SQL Injection

CVE-2008-4347—webappsphp

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2011-5165

CVE-2011-5165—

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem

50RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Volunteer 2.0 - SQL Injection

CVE-2008-6337—webappsphp

SQL injection vulnerability in the Volunteer Management System (com_volunteer) module 2.0 for Joomla! allows remote atta

23RIESGO

abrir ↗

Referência✓ VexDay Proof

pForum 1.30 - 'showprofil.php' SQL Injection

CVE-2008-4355—webappsphp

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows r

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Facil-CMS 0.1RC - Multiple Local File Inclusions

CVE-2008-7176—webappsphp

Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..

23RIESGO

abrir ↗

Referência✓ VexDay Proof

smNews 1.0 - Authentication Bypass / Column Truncation

CVE-2009-0750—webappsphp

SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

RM Downloader 3.0.0.9 - '.RAM' Local Buffer Overflow

CVE-2009-1646—localwindows

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RIESGO

abrir ↗

Referência

CVE-2009-3193

CVE-2009-3193—

SQL injection vulnerability in the DigiFolio (com_digifolio) component 1.52 for Joomla! allows remote attackers to execu

23RIESGO

abrir ↗

Referência

CVE-2005-2855

CVE-2005-2855—

Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web

23RIESGO

abrir ↗

Referência✓ VexDay Proof

DESlock+ 3.2.7 - 'vdlptokn.sys' Local Denial of Service

CVE-2008-4362—doswindows

The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (syst

23RIESGO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.7 - 'probe read' Local Kernel Denial of Service (PoC)

CVE-2008-4363—doswindows

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially exe

23RIESGO

abrir ↗

Referência

CVE-2010-4142

CVE-2010-4142—

Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a

50RIESGO

abrir ↗

Referência

CVE-2010-5021

CVE-2010-5021—

SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2010-5021

CVE-2010-5021—

SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e

23RIESGO

abrir ↗

Referência

CVE-2024-20353

CVE-2024-20353HIGHbajo ataque

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir

93RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows XP/2003 - IGMP v3 Denial of Service (MS06-007) (1)

CVE-2006-0021—doswindows

Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang)

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Hex Workshop 6.0 - '.hex' Local Code Execution

CVE-2009-0812—localwindows

Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions all

23RIESGO

abrir ↗

Referência

CVE-2015-7768

CVE-2015-7768—

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma

50RIESGO

abrir ↗

Referência

CVE-2010-5022

CVE-2010-5022—

SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote at

23RIESGO

abrir ↗

Referência

CVE-2016-0151

CVE-2016-0151HIGHbajo ataqueransomware

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,

83RIESGO

abrir ↗

Referência

CVE-2018-7422

CVE-2018-7422—

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to re

50RIESGO

abrir ↗

Referência

CVE-2010-5033

CVE-2010-5033—

SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2010-5034

CVE-2010-5034—

SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbit

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ParsaWeb CMS - 'Search' SQL Injection

CVE-2008-4364—webappsasp

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência

CVE-2011-5003

CVE-2011-5003—

Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier a

50RIESGO

abrir ↗

Referência✓ VexDay Proof

The Bible Portal Project 2.12 - 'destination' File Inclusion

CVE-2006-3177—webappsphp

PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows remo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ASP Stats Generator 2.1.1 - SQL Injection

CVE-2006-3184—webappsasp

Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to

23RIESGO

abrir ↗

Referência

CVE-2018-8617

CVE-2018-8617—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

35RIESGO

abrir ↗

Referência

CVE-2019-13396

CVE-2019-13396—

FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an in

50RIESGO

abrir ↗

Referência

CVE-2012-6708

CVE-2012-6708—

jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differen

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.