Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.107exploits catalogados
36.322CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3490✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
txtCMS 0.3 - 'index.php' Local File Inclusion
CVE-2008-5217—webappsphp
Directory traversal vulnerability in index.php in txtCMS 0.3, when register_globals is enabled and magic_quotes_gpc is d
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SimpleNews 1.0.0 FINAL - 'print.php?news_id' SQL Injection
CVE-2007-2598—webappsphp
SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion
CVE-2008-1649—webappsphp
Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mobius 1.4.4.1 - SQL Injection
CVE-2008-3420—webappsphp
Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MyForum 1.3 - 'padmin' Local File Inclusion
CVE-2008-4780—webappsphp
Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows remote at
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OpenElec 3.01 - 'obj' Local File Inclusion
CVE-2008-6025—webappsphp
Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EggBlog 3.1.0 - Cookies SQL Injection
CVE-2008-0159—webappsphp
SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ruby 1.9 - regex engine Remote Socket Memory Leak
CVE-2008-3443—dosmultiple
The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, an
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Dagger CMS 2008 - 'dir_inc' Remote File Inclusion
CVE-2008-6636—webappsphp
PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SCMS 1 - Local File Inclusion
CVE-2009-0330—webappsphp
Directory traversal vulnerability in index.php in Simple Content Management System (SCMS) 1 allows remote attackers to i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpskelsite 1.4 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
CVE-2009-0596—webappsphp
Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled, allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
pastelcms 0.8.0 - Local File Inclusion / SQL Injection
CVE-2009-1405—webappsphp
Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pluxml 0.3.1 - Remote Code Execution
CVE-2007-3542—webappsphp
Cross-site scripting (XSS) vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Artmedic CMS 3.4 - 'index.php' Local File Inclusion
CVE-2007-5600—webappsphp
Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection
CVE-2006-1110—webappsphp
Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HT
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering
CVE-2008-3398—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Referência✓ VexDay Proof
bcoos 1.0.13 - 'viewcat.php' SQL Injection
CVE-2008-6381—webappsphp
SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authent
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Easy Photo Gallery 2.1 - Cross-Site Scripting / File Disclosure/Bypass / SQL Injection
CVE-2008-6988—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pixlie 1.7 - 'pixlie.php?root' Remote File Disclosure
CVE-2007-4314—webappsphp
pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote d
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SetCMS 3.6.5 - Remote Command Execution
CVE-2008-0478—webappsphp
Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DBHcms 1.1.4 - 'code' Remote File Inclusion
CVE-2008-1038—webappsphp
PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TopperMod 1.0 - 'mod.php' Local File Inclusion
CVE-2008-1553—webappsphp
Directory traversal vulnerability in mod.php in TopperMod 1.0 allows remote attackers to include and execute arbitrary l
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component netinvoice 1.2.0 SP1 - SQL Injection
CVE-2008-3498—webappsphp
SQL injection vulnerability in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
polypager 1.0rc2 - SQL Injection / Cross-Site Scripting
CVE-2008-3505—webappsphp
Cross-site scripting (XSS) vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗
Referência✓ VexDay Proof
poweraward 1.1.0 rc1 - Local File Inclusion / Cross-Site Scripting
CVE-2008-5204—webappsphp
Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when register_globals is enabled, allow remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Feed CMS 1.07.03.19b - 'lang' Local File Inclusion
CVE-2008-6361—webappsphp
Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ThaiQuickCart 3 - 'sLanguage' Cookie Local File Inclusion
CVE-2008-6735—webappsphp
Directory traversal vulnerability in qc/index.php in ThaiQuickCart 3 allows remote attackers to read arbitrary files via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pie Web m{a_e}sher mod rss 0.1 - Remote File Inclusion
CVE-2008-7073—webappsphp
PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_gl
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Cybershade CMS 0.2b - 'index.php' Remote File Inclusion
CVE-2009-0701—webappsphp
Multiple PHP remote file inclusion vulnerabilities in index.php in Cybershade CMS 0.2b, when register_globals is enabled
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DomPHP 0.81 - 'index.php' Remote File Inclusion
CVE-2008-0283—webappsphp
PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execut
23RIESGO
abrir ↗
← anteriorpágina 99 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.