Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.780exploits catalogados
39.319CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.394Exploit-DB 24.485GitHub PoC 16.249VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
Bradabra 2.0.5 - '/include/includes.php' Remote File Inclusion
CVE-2007-0500—webappsphp
PHP remote file inclusion vulnerability in include/includes.php in Bradabra 2.0.5 and earlier allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vote-Pro 4.0 - 'poll_frame.php?poll_id' Remote Code Execution
CVE-2007-0504—webappsphp
Eval injection vulnerability in poll_frame.php in Vote! Pro 4.0, and possibly other scripts, allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PA168 Chipset IP Phones - Weak Session Management
CVE-2007-0528—remotehardware
The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and ear
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Diesel Joke Site - 'picture_category.php' SQL Injection
CVE-2008-4150—webappsphp
SQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
snap - seccomp BBlacklist for TIOCSTI can be Circumvented
CVE-2019-7303MEDIUMdoslinux
Snapd seccomp filter TIOCSTI ioctl bypass
33RIESGO
abrir ↗
Referência✓ VexDay Proof
2WIRE Modems/Routers - 'CRLF' Denial of Service
CVE-2006-4523—doshardware
The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote at
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EclipseBB 0.5.0 Lite - 'phpbb_root_path' Remote File Inclusion
CVE-2007-0581—webappsphp
PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TCExam 4.0.011 - 'SessionUserLang' Shell Injection
CVE-2007-2430—webappsphp
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eIQnetworks ESA SEARCHREPORT - Remote Overflow (Metasploit)
CVE-2007-5699—remotewindows
Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PolDoc CMS 0.96 - 'download_file.php' File Disclosure
CVE-2007-6400—webappsphp
Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MX-System 2.7.3 - 'index.php' SQL Injection
CVE-2008-2477—webappsphp
SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ProArcadeScript 1.3 - 'random' SQL Injection
CVE-2008-4173—webappsphp
SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the ran
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Google Chrome 0.2.149.27 - Inspect Element Denial of Service
CVE-2008-6997—doswindows
Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
@lex Guestbook 4.0.2 - Remote Command Execution
CVE-2007-0202—webappsphp
SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Internet Explorer 7 - Memory Corruption (PoC) (MS09-002)
CVE-2009-0075—doswindows
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows r
60RIESGO
abrir ↗
Referência✓ VexDay Proof
GuppY 4.5.16 - Remote Command Execution
CVE-2007-0639—webappsphp
Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EDraw Flowchart ActiveX Control 2.0 - Insecure Method
CVE-2007-5826—remotewindows
Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
bloofox 0.3 - SQL Injection / File Disclosure
CVE-2008-0427—webappsphp
Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Acidcat CMS 3.4.1 - Multiple Vulnerabilities
CVE-2008-1993—webappsphp
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Integramod 1.4.x - Insecure Directory Download Database
CVE-2008-4183—webappsphp
IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fullaspsite Asp Hosting Sitesi - 'tr' SQL Injection
CVE-2007-0678—webappsasp
SQL injection vulnerability in windows.asp in Fullaspsite Asp Hosting Sitesi allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Tweaked 3 - 'phpbb_root_path' Remote File Inclusion
CVE-2007-0680—webappsphp
PHP remote file inclusion vulnerability in includes/functions.php in Phpbb Tweaked 3 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AuraCMS 2.1 - Remote File Attachment / Local File Inclusion
CVE-2007-4908—webappsphp
Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
JV2 Folder Gallery 3.0 - Remote File Inclusion
CVE-2007-0682—webappsphp
PHP remote file inclusion vulnerability in theme/include_mode/template.php in JV2 Folder Gallery 3.0.2 and earlier allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Weblosninger 4 - Cross-Site Scripting / SQL Injection
CVE-2008-2506—webappsphp
Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FlashGet 1.9.0.1012 - 'FTP PWD Response' Remote Buffer Overflow (SafeSEH)
CVE-2008-4321—remotewindows
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long res
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting / SQL Injection
CVE-2008-4335—webappsphp
SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LunarPoll 1.0 - 'show.php?PollDir' Remote File Inclusion
CVE-2007-0298—webappsphp
PHP remote file inclusion vulnerability in show.php in LunarPoll, when register_globals is enabled, allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
idmos-phoenix CMS - 'aural.php' Remote File Inclusion
CVE-2007-5294—webappsphp
PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Gradman 0.1.3 - 'agregar_info.php' Local File Inclusion
CVE-2008-0361—webappsphp
Directory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote attackers to include an
23RIESGO
abrir ↗
← anteriorpágina 81 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.