Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.689exploits catalogados
38.075CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.381GitHub PoC 15.712VulnCheck XDB 9162Nuclei 4445Metasploit 3507✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Referência✓ VexDay Proof
Avlc Forum - 'vlc_forum.php' SQL Injection
CVE-2008-3200—webappsphp
SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CMS Faethon 2.2 Ultimate - Remote File Inclusion / Cross-Site Scripting
CVE-2008-2128—webappsphp
PHP remote file inclusion vulnerability in templates/header.php in CMS Faethon 2.2 Ultimate allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
sourdough 0.3.5 - Remote File Inclusion
CVE-2009-0456—webappsphp
PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Discloser 0.0.4 - 'fileloc' Remote File Inclusion
CVE-2006-4207—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AJ Dating 1.0 - 'view_profile.php' SQL Injection
CVE-2007-1297—webappsphp
SQL injection vulnerability in view_profile.php in AJDating 1.0 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TemaTres 1.0.3 - Authentication Bypass / SQL Injection / Cross-Site Scripting
CVE-2009-1583—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mini-stream ASX to MP3 Converter 3.0.0.7 - '.asx HREF' Local Buffer Overflow
CVE-2009-1642—localwindows
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Thickbox Gallery 2 - 'index.php' Local File Inclusion
CVE-2009-1625—webappsphp
Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Document Imaging SDK 10.95 - ActiveX Buffer Overflow (PoC)
CVE-2008-3209—doswindows
Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remot
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Alstrasoft Affiliate Network Pro - 'pgm' SQL Injection
CVE-2008-3240—webappsphp
SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OneCMS 2.4 - SQL Injection / Upload
CVE-2008-7209—webappsphp
Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Experts 1.0.0 - 'answer.php' SQL Injection
CVE-2008-5267—webappsphp
SQL injection vulnerability in answer.php in Experts 1.0.0, when magic_quotes_gpc is disabled, allows remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Solaris 9 (UltraSPARC) - 'sadmind' Remote Code Execution
CVE-2008-4556—remotesolaris
Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allo
50RIESGO
abrir ↗
Referência✓ VexDay Proof
Silentum LoginSys 1.0.0 - Insecure Cookie Handling
CVE-2008-6763—webappsphp
login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
pPIM 1.01 - 'notes.php' Local File Inclusion
CVE-2008-4528—webappsphp
Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AJ Auction Pro - 'subcat.php' SQL Injection
CVE-2007-1298—webappsphp
SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IP Reg 0.4 - Blind SQL Injection
CVE-2008-4523—webappsphp
SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Site Lock 2.0 - Insecure Cookie Handling
CVE-2009-1587—webappsphp
index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by sett
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CPCommerce 1.1.0 - Cross-Site Scripting / Local File Inclusion
CVE-2008-1907—webappsphp
Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre Classifieds Listings 1.0 - SQL Injection
CVE-2007-2675—webappsphp
SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Colloquy 2.1.3545 - 'INVITE' Format String Denial of Service
CVE-2007-0344—dososx
Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier
23RIESGO
abrir ↗
Referência✓ VexDay Proof
V-Webmail 1.6.4 - 'pear_dir' Remote File Inclusion
CVE-2006-2665—webappsphp
PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Claroline E-Learning 1.75 - 'ldap.inc.php' Remote File Inclusion
CVE-2006-2284—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pie Web M{a_e}sher 0.5.3 - Multiple Remote File Inclusions
CVE-2008-5332—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ThinkEdit 1.9.2 - 'render.php' Remote File Inclusion
CVE-2006-6426—webappsphp
PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when register_glo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
7Shop 1.1 - Arbitrary File Upload
CVE-2008-6806—webappsphp
Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PicoFlat CMS 0.5.9 (Windows) - Local File Inclusion
CVE-2008-6604—webappsphp
Directory traversal vulnerability in index.php in PicoFlat CMS 0.5.9 allows remote attackers to include and execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NewsOffice 1.1 - Remote File Inclusion
CVE-2008-1903—webappsphp
PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enab
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Mumbo Jumbo Media OP4 - Blind SQL Injection
CVE-2008-6477—webappsphp
SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PreProject Multi-Vendor Shopping Malls - Multiple Vulnerabilities
CVE-2008-6227—webappsphp
SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute ar
23RIESGO
abrir ↗
← anteriorpágina 670 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.