Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.924exploits catalogados
38.251CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.506Exploit-DB 24.485GitHub PoC 15.787VulnCheck XDB 9186Nuclei 4448Metasploit 3512✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Referência✓ VexDay Proof
FutureSoft TFTP Server 2000 - Remote Overwrite (SEH)
CVE-2007-1645—remotewindows
Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrar
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Active Photo Gallery - 'catid' SQL Injection
CVE-2007-1629—webappsasp
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wget 1.10.2 - Unchecked Boundary Condition Denial of Service
CVE-2006-6719—dosmultiple
The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EO Video 1.36 - Local Heap Overflow Denial of Service / (PoC)
CVE-2008-3733—doswindows
Stack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial of service (applicatio
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IP Reg 0.3 - Multiple SQL Injections
CVE-2007-6579—webappsphp
Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vl
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Active PHP Bookmark Notes 0.2.5 - Remote File Inclusion
CVE-2007-1621—webappsphp
PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes (APB) 0.2.5 and earlier allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ravennuke 2.3.0 - Multiple Vulnerabilities
CVE-2009-0678—webappsphp
images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array paramet
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP DB Designer 1.02 - Remote File Inclusion
CVE-2007-1620—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Dokeos E-Learning System 1.8.5 - Local File Inclusion
CVE-2008-3363—webappsphp
Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ScriptMagix Photo Rating 2.0 - SQL Injection
CVE-2007-1619—webappsphp
SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ScriptMagix Recipes 2.0 - 'index.php?catid' SQL Injection
CVE-2007-1617—webappsphp
SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ScriptMagix Lyrics 2.0 - 'index.php?recid' SQL Injection
CVE-2007-1616—webappsphp
SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Internet Explorer - MDAC Remote Code Execution (MS06-014)
CVE-2006-0003—remotewindows
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and dis
60RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPUserBase 1.3b - 'unverified.inc.php' Local File Inclusion
CVE-2008-7240—webappsphp
Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
minb 0.1.0 - Remote Code Execution
CVE-2008-7005—webappsphp
include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Half-Life CSTRIKE Server 1.6 - 'no-steam' Denial of Service
CVE-2008-7203—dosmultiple
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple cr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component nfnaddressbook 0.4 - Remote File Inclusion
CVE-2007-1596—webappsphp
Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mambo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP 5.2.0 (OSX) - 'header()' Space Trimming Buffer Underflow
CVE-2007-1584—localosx
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by pas
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Etomite CMS 0.6.1 - 'rfiles.php' Remote Command Execution
CVE-2006-7070—webappsphp
Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier all
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Stats 0.1.9.2 - Multiple Vulnerabilities
CVE-2007-5453—webappsphp
Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vote-Pro 4.0 - 'poll_frame.php?poll_id' Remote Code Execution
CVE-2007-0504—webappsphp
Eval injection vulnerability in poll_frame.php in Vote! Pro 4.0, and possibly other scripts, allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Freelance Auction Script 1.0 - 'browseproject.php' SQL Injection
CVE-2008-2278—webappsphp
SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebLog - 'index.php' Remote File Disclosure
CVE-2007-1487—webappsphp
Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wbblog - Cross-Site Scripting / SQL Injection
CVE-2007-1482—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in WBBlog allows remote attackers to inject arbitrary web script o
23RIESGO
abrir ↗
Referência✓ VexDay Proof
creative Guestbook 1.0 - Multiple Vulnerabilities
CVE-2007-1480—webappsphp
Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php
23RIESGO
abrir ↗
Referência✓ VexDay Proof
QNX Neutrino 0.8.4 Atomic Edition - Remote Code Execution
CVE-2008-3150—webappsphp
Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
W1L3D4 philboard 1.0 - 'philboard_reply.asp' SQL Injection
CVE-2008-1939—webappsasp
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MySQL Commander 2.7 - 'home' Remote File Inclusion
CVE-2007-1439—webappsphp
PHP remote file inclusion vulnerability in ressourcen/dbopen.php in bitesser MySQL Commander 2.7 and earlier, when regis
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phosheezy 2.0 - Remote Command Execution
CVE-2009-0250—webappsphp
Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LightNEasy 1.2 - no database Remote Hash Retrieve
CVE-2008-6537—webappsphp
LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the admini
23RIESGO
abrir ↗
← anteriorpágina 744 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.