Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados

39.383CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

MultiCart 1.0 - Blind SQL Injection

CVE-2007-5261—webappsphp

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Softbiz Freelancers Script 1 - SQL Injection

CVE-2007-6124—webappsphp

Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Help Agent 1.1 - 'content' Local File Inclusion

CVE-2008-3385—webappsphp

Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attacker

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Tribiq CMS 5.0.10a (Windows) - Local File Inclusion

CVE-2008-4894—webappsphp

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CMS NetCat 3.12 - Multiple Vulnerabilities

CVE-2008-5728—webappsphp

Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and regi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ScozNews 1.2.1 - 'mainpath' Remote File Inclusion

CVE-2006-2487—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbit

23RIESGO

abrir ↗

Referência✓ VexDay Proof

NICE FAQ Script - Authentication Bypass

CVE-2008-6525—webappsphp

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

StrawBerry 1.1.1 - Local File Inclusion / Remote Command Execution

CVE-2009-1774—webappsphp

Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and exe

28RIESGO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche News 1.x - 'CAT_ID' SQL Injection

CVE-2007-1021—webappsasp

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mapbender 2.4.4 - 'mapFiler.php' Remote Code Execution

CVE-2008-0300—webappsphp

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpShop 0.8.1 - SQL Injection / Filter Bypass

CVE-2008-0681—webappsphp

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection

CVE-2008-2084—webappsphp

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to exec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPHoo3 < 5.2.6 - 'viewCat' SQL Injection

CVE-2008-3245—webappsphp

SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP infoboard 7 plus - Multiple Vulnerabilities

CVE-2008-4332—webappsphp

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ParsBlogger - 'blog.asp' SQL Injection

CVE-2008-5637—webappsphp

SQL injection vulnerability in blog.asp in ParsBlogger (Pb) allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FaScript FaUpload - SQL Injection

CVE-2008-5766—webappsphp

SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Flexphplink 0.0.x - Authentication Bypass

CVE-2008-6730—webappsphp

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magic_quotes_gpc

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Fusion News 1.0 (fil_config) - Remote File Inclusion

CVE-2006-3387—webappsphp

Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remot

23RIESGO

abrir ↗

Referência✓ VexDay Proof

gCards 1.46 - SQL Injection / Remote Code Execution

CVE-2007-2971—webappsphp

SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ooVoo 1.7.1.35 - 'URL Protocol' Remote Unicode Buffer Overflow (PoC)

CVE-2008-6953—doswindows

Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

smeweb 1.4b - SQL Injection / Cross-Site Scripting

CVE-2008-2644—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary w

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ST-Gallery 0.1a - Multiple SQL Injections

CVE-2009-1799—webappsphp

Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1

23RIESGO

abrir ↗

Referência✓ VexDay Proof

mm chat 1.5 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2974—webappsphp

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when register_globals is enabled, allows remote atta

23RIESGO

abrir ↗

Referência✓ VexDay Proof

nzFotolog 0.4.1 - 'action_file' Local File Inclusion

CVE-2008-3405—webappsphp

Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Zanfi CMS lite 1.2 - Multiple Local File Inclusions

CVE-2008-4158—webappsphp

Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Text Link Sales - 'id' Cross-Site Scripting / SQL Injection

CVE-2008-5487—webappsphp

Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject

23RIESGO

abrir ↗

Referência✓ VexDay Proof

myPHPscripts Login Session 2.0 - Cross-Site Scripting / Database Disclosure

CVE-2008-5854—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attacker

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP::HTML 0.6.4 - 'PHPhtml.php' Remote File Inclusion

CVE-2007-3230—webappsphp

PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute

35RIESGO

abrir ↗

Referência✓ VexDay Proof

kubix 0.7 - Multiple Vulnerabilities

CVE-2006-7117—webappsphp

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

nicLOR Sito - includefile Local File Inclusion

CVE-2008-6290—webappsphp

Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_gp

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.