Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.554exploits catalogados

39.165CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.281Exploit-DB 24.485GitHub PoC 16.153VulnCheck XDB 9636Nuclei 4476Metasploit 3523✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

EsFaq 2.0 - 'idcat' SQL Injection

CVE-2008-3952—webappsphp

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

my-colex 1.4.2 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1825—webappsphp

modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated u

23RIESGO

abrir ↗

Referência✓ VexDay Proof

my-gesuad 0.9.14 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1826—webappsphp

modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote aut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

WonderEdit Pro CMS (template_path) - Remote File Inclusion

CVE-2006-3422—webappsphp

PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

NmnNewsletter 1.0.7 - 'output' Remote File Inclusion

CVE-2007-6585—webappsphp

PHP remote file inclusion vulnerability in confirmUnsubscription.php in NmnNewsletter 1.0.7 allows remote attackers to e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component EZ Store Remote - Blind SQL Injection

CVE-2008-3586—webappsphp

SQL injection vulnerability in the EZ Store (com_ezstore) component for Joomla! allows remote attackers to execute arbit

23RIESGO

abrir ↗

Referência✓ VexDay Proof

OpenImpro 1.1 - 'image.php' SQL Injection

CVE-2008-3599—webappsphp

SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PozScripts Classified Ads Script - 'cid' SQL Injection

CVE-2008-3673—webappsphp

SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TubeGuru Video Sharing Script - 'UID' SQL Injection

CVE-2008-3674—webappsphp

SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CFAGCMS 1 - SQL Injection

CVE-2008-5781—webappsphp

SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Easy Px 41 CMS 09.00.00B1 - 'fiche' Local File Inclusion

CVE-2009-1847—webappsphp

Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

V3 Chat Live Support 3.0.4 - Insecure Cookie Handling

CVE-2008-5783—webappsphp

admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

LoudBlog 0.6.1 - 'parsedpage' Remote Code Execution

CVE-2008-0139—webappsphp

Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to exec

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Nokia e90/n82 (s60v3) - Remote Denial of Service

CVE-2008-4135—doshardware

Symbian OS S60 3rd edition on the Nokia E90 Communicator 07.40.1.2 Ra-6 and Nseries N82 allows remote attackers to cause

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Apache mod_dav / svn - Remote Denial of Service

CVE-2009-1955—dosmultiple

The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_pcchess - Blind SQL Injection

CVE-2009-0379—webappsphp

SQL injection vulnerability in the Prince Clan Chess Club (com_pcchess) component for Joomla! allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpWebThings 1.5.2 - MD5 Hash Retrieve/File Disclosure

CVE-2009-2147—webappsphp

SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

OllyDbg 1.10 - Local Format String

CVE-2004-0733—localwindows

Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

StreamAudio ChainCast ProxyManager - 'ccpm_0237.dll' Remote Buffer Overflow

CVE-2008-0248—remotewindows

Buffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to

28RIESGO

abrir ↗

Referência✓ VexDay Proof

WebcamXP 5.3.2.375 - Remote File Disclosure

CVE-2008-5862—remotewindows

Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow

CVE-2008-0250—localwindows

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St

28RIESGO

abrir ↗

Referência✓ VexDay Proof

iGaming CMS 1.3.1/1.5 - SQL Injection

CVE-2008-0255—webappsphp

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities

CVE-2008-5879—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Devalcms 1.4a - Cross-Site Scripting / Remote Code Execution

CVE-2008-6983—webappsphp

modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche Directory - Database Disclosure

CVE-2008-5898—webappsasp

CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows r

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MailBee WebMail Pro 4.1 - Remote File Disclosure

CVE-2008-0333—webappsasp

Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET all

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Evilsentinel 1.0.9 - Multiple Vulnerabilities Disable

CVE-2008-0351—webappsphp

admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the es

23RIESGO

abrir ↗

Referência✓ VexDay Proof

bubbling library 1.32 - 'uri' Remote File Disclosure

CVE-2008-0521—webappsphp

Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to read arbitrary files via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Easy Webstore 1.2 - SQL Injection

CVE-2008-2853—webappsphp

SQL injection vulnerability in index.php in Easy Webstore 1.2 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPMyRealty 1.0.9 - Multiple SQL Injections

CVE-2008-3861—webappsphp

Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrar

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.