Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.689exploits catalogados
38.075CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.381GitHub PoC 15.712VulnCheck XDB 9162Nuclei 4445Metasploit 3507✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Referência✓ VexDay Proof
Active Link Engine - 'default.asp?catid' SQL Injection
CVE-2007-1630—webappsasp
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Oreon 1.4 / Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities
CVE-2007-6485—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute a
28RIESGO
abrir ↗
Referência✓ VexDay Proof
PowerNews 2.5.6 - Local File Inclusion
CVE-2008-0742—webappsphp
Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BuzzyWall 1.3.1 - 'search' SQL Injection
CVE-2008-6029—webappsphp
SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magic_quotes_gpc is disabled, allows remo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech Dating Zone - 'fage' SQL Injection
CVE-2008-4461—webappsphp
SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting
CVE-2006-4607—webappsphp
admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by setting
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AvailScript Article Script - 'articles.php' Multiple Vulnerabilities
CVE-2008-4372—webappsphp
Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AvailScript Article Script - 'articles.php' Multiple Vulnerabilities
CVE-2008-4371—webappsphp
SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Rianxosencabos CMS 0.9 - Blind SQL Injection
CVE-2008-6014—webappsphp
SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ol BookMarks Manager 0.7.5 - Local File Inclusion
CVE-2008-6410—webappsphp
Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to inclu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IMGallery 2.5 - Create Uploader Script
CVE-2007-0082—webappsphp
users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SG Real Estate Portal 2.0 - Blind SQL Injection / Local File Inclusion
CVE-2008-6011—webappsphp
SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fastpublish CMS 1.9999 - config[fsBase] Remote File Inclusion
CVE-2007-6325—webappsphp
PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attacke
28RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP KnowledgeBase Script 2.4 - 'cat_id' SQL Injection
CVE-2008-2972—webappsphp
SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the ca
23RIESGO
abrir ↗
Referência✓ VexDay Proof
jetAudio 7.0.5 - '.asx' Remote Stack Overflow (PoC)
CVE-2008-0747—doswindows
Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting
CVE-2006-4605—webappsphp
PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Explay CMS 2.1 - Insecure Cookie Handling
CVE-2008-6411—webappsphp
Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting th
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BookMarks Favourites Script - 'id' SQL Injection
CVE-2008-6007—webappsphp
SQL injection vulnerability in view_group.php in QuidaScript BookMarks Favourites Script (APB) allows remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
jaxultrabb 2.0 - Local File Inclusion / Cross-Site Scripting
CVE-2008-2965—webappsphp
Cross-site scripting (XSS) vulnerability in viewforum.php in JaxUltraBB (JUBB) 2.0 and earlier allows remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AJ Auction Pro Platinum - 'seller_id' SQL Injection
CVE-2008-6004—webappsphp
Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
barcodegen 2.0.0 - Local File Inclusion
CVE-2008-5993—webappsphp
Directory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and earlier allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
emergecolab 1.0 - 'sitecode' Local File Inclusion
CVE-2008-5990—webappsphp
Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution
CVE-2008-2950—locallinux
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not
28RIESGO
abrir ↗
Referência✓ VexDay Proof
GdPicture Pro - ActiveX 'gdpicture4s.ocx' File Overwrite / Exec
CVE-2008-4453—remotewindows
The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) 4.7.0.1 and (2) Pro
28RIESGO
abrir ↗
Referência✓ VexDay Proof
ICQ Toolbar 2.3 - ActiveX Remote Denial of Service
CVE-2008-7136—doswindows
toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Social Site Generator 2.0 - 'sgc_id' SQL Injection
CVE-2008-6419—webappsphp
Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
docpile:we 0.2.2 - 'INIT_PATH' Remote File Inclusion
CVE-2006-4075—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 and ear
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Active Price Comparison 4 - Authentication Bypass
CVE-2008-5974—webappsasp
Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sun jre1.6.0_X - isInstalled.dnsResolve Function Overflow
CVE-2007-5019—dosmultiple
Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attack
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Linux Kernel 2.6.21.1 - IPv6 Jumbo Bug Remote Denial of Service
CVE-2008-0352—doslinux
The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6
28RIESGO
abrir ↗
← anteriorpágina 672 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.