Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

82.117exploits catalogados

38.374CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 24.594Exploit-DB 24.485GitHub PoC 15.871VulnCheck XDB 9205Nuclei 4449Metasploit 3513✓ solo verificadosrecientes populares riesgo

24.695 exploits

Referência✓ VexDay Proof

PHPManta 1.0.2 - 'view-sourcecode.php' Local File Inclusion

CVE-2006-5866—webappsphp

Directory traversal vulnerability in Mdoc/view-sourcecode.php for phpManta 1.0.2 and earlier allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection

CVE-2009-1032—webappsphp

SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

My Game Script 2.0 - Authentication Bypass

CVE-2009-1816—webappsphp

SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BusinessSpace 1.2 - 'id' SQL Injection

CVE-2009-0516—webappsphp

SQL injection vulnerability in the classified page (classified.php) in BusinessSpace 1.2 and earlier allows remote attac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPAuctionSystem - Cross-Site Scripting / SQL Injection

CVE-2009-0106—webappsphp

SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Hosting Directory - 'cat_id' SQL Injection

CVE-2008-6782—webappsphp

SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FLDS 1.2a - 'redir.php' SQL Injection

CVE-2008-5928—webappsphp

SQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpsmartcom 0.2 - Local File Inclusion / SQL Injection

CVE-2008-4351—webappsphp

Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BluSky CMS - 'news_id' SQL Injection

CVE-2009-1548—webappsphp

SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the

23RIESGO

abrir ↗

Referência✓ VexDay Proof

DigiLeave 1.2 - 'book_id' Blind SQL Injection

CVE-2008-3309—webappsasp

SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Content Injector 1.53 - 'index.php' SQL Injection

CVE-2007-6394—webappsphp

SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência✓ VexDay Proof

JobSite Professional 2.0 - 'file.php' SQL Injection

CVE-2007-5785—webappsphp

SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpFullAnnu (PFA) 6.0 - SQL Injection

CVE-2007-5068—webappsphp

SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS module Articles 1.02 - 'print.php?id' SQL Injection

CVE-2007-3311—webappsphp

SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ZEELYRICS 2.0 - 'bannerclick.php' SQL Injection

CVE-2008-4717—webappsphp

SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Arcadwy Arcade Script - (Authentication Bypass) Insecure Cookie Handling

CVE-2009-1229—webappsphp

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the u

23RIESGO

abrir ↗

Referência✓ VexDay Proof

eReservations - Authentication Bypass

CVE-2009-0252—webappsasp

Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Powies pForum 1.29a - 'editpoll.php' SQL Injection

CVE-2006-6038—webappsphp

SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

NuMedia Soft Nms DVD Burning SDK - ActiveX 'NMSDVDX.dll' Command Execution

CVE-2008-4342—remotewindows

NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used

28RIESGO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module pnFlashGames 2.5 - SQL Injection

CVE-2008-2013—webappsphp

SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magic_quotes_gpc

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'Cuid' cookie Blind SQL Injection

CVE-2008-0734—webappsphp

SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Real Estate - 'fullnews.php?id' SQL Injection

CVE-2007-6462—webappsphp

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

QuickEStore 8.2 - 'insertorder.cfm' SQL Injection

CVE-2007-3933—webappsphp

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module WF-Snippets 1.02 (c) - Blind SQL Injection

CVE-2007-1962—webappsphp

SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CoolPlayer 2.17 - '.m3u' Local Stack Overflow

CVE-2006-6288—localwindows

Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

F-Prot AntiVirus 4.6.6 - CHM Heap Overflow (PoC)

CVE-2006-6293—doslinux

Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to exec

28RIESGO

abrir ↗

Referência✓ VexDay Proof

DigiRez 3.4 - 'book_id' SQL Injection

CVE-2007-0128—webappsasp

SQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Discuz! 5.0.0 GBK - SQL Injection / Admin Credentials Disclosure

CVE-2006-5561—webappsphp

SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Basic PHP Events Lister 1.0 - SQL Injection

CVE-2008-6464—webappsphp

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to exe

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CM68 News 12.02.06 - 'addpth' Remote File Inclusion

CVE-2006-6462—webappsphp

PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execu

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.