Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.107exploits catalogados
36.322CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3490✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
Polaring 0.04.03 - 'general.php' Remote File Inclusion
PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remot
23RIESGO
abrir ↗Referência✓ VexDay Proof
paBugs 2.0 Beta 3 - 'class.mysql.php' Remote File Inclusion
PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote
23RIESGO
abrir ↗Referência✓ VexDay Proof
evoBB 0.3 - 'path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
A-Blog 2.0 - 'menu.php' Remote File Inclusion
PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
TagIt! Tagboard 2.1.b b2 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows re
23RIESGO
abrir ↗Referência✓ VexDay Proof
Linksys WRT54G Firmware 1.00.9 - Security Bypass (2)
Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attac
23RIESGO
abrir ↗Referência✓ VexDay Proof
Invision Gallery 2.0.7 - 'readfile()' / SQL Injection
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Referência✓ VexDay Proof
SHTTPD 1.34 - 'POST' Remote Buffer Overflow
Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary cod
50RIESGO
abrir ↗Referência✓ VexDay Proof
Millewin 13.39.146.1 - Local Privilege Escalation
Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder per
23RIESGO
abrir ↗Referência✓ VexDay Proof
Dimension of phpBB 0.2.6 - 'phpbb_root_path' Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to exe
23RIESGO
abrir ↗Referência✓ VexDay Proof
FreeForum 0.9.7 - 'forum.php' Remote File Inclusion
PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute a
23RIESGO
abrir ↗Referência✓ VexDay Proof
Ciamos CMS 0.9.6b - 'config.php' Remote File Inclusion
PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System (CMS) 0.
23RIESGO
abrir ↗Referência✓ VexDay Proof
compteur 2.0 - 'param_editor.php' Remote File Inclusion
PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗Referência✓ VexDay Proof
PHPMyNews 1.4 - 'cfg_include_dir' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbitr
23RIESGO
abrir ↗Referência✓ VexDay Proof
Microsoft Office 2003 - '.PPT' Local Buffer Overflow (PoC)
PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record
28RIESGO
abrir ↗Referência✓ VexDay Proof
phpBB lat2cyr Mod 1.0.1 - 'lat2cyr.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attac
23RIESGO
abrir ↗Referência✓ VexDay Proof
Open Conference Systems 1.1.4 - 'fullpath' File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers
23RIESGO
abrir ↗Referência✓ VexDay Proof
TribunaLibre 3.12 Beta - 'ftag.php' Remote File Inclusion
PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitra
23RIESGO
abrir ↗Referência✓ VexDay Proof
registroTL - 'main.php' Remote File Inclusion
PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code
23RIESGO
abrir ↗Referência✓ VexDay Proof
eboli - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via
23RIESGO
abrir ↗Referência✓ VexDay Proof
Album Photo Sans Nom 1.6 - Remote Source Disclosure
Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary fi
23RIESGO
abrir ↗Referência✓ VexDay Proof
phpBB PlusXL 2.0_272 - 'constants.php' Remote File Inclusion
PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module
23RIESGO
abrir ↗Referência✓ VexDay Proof
PHPht Topsites - 'common.php' Remote File Inclusion
PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute
23RIESGO
abrir ↗Referência✓ VexDay Proof
Open Meetings Filing Application - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote
23RIESGO
abrir ↗Referência✓ VexDay Proof
EZ-Ticket 0.0.1 - 'common.php' Remote File Inclusion
PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PH
23RIESGO
abrir ↗Referência✓ VexDay Proof
PHP-Nuke 7.9 - 'Encyclopedia' SQL Injection
Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL in
23RIESGO
abrir ↗Referência✓ VexDay Proof
Fully Modded phpBB 2021.4.40 - Multiple File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 202
23RIESGO
abrir ↗Referência✓ VexDay Proof
OTSCMS 2.1.3 - Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 2.0
23RIESGO
abrir ↗Referência✓ VexDay Proof
RevilloC MailServer 1.x - 'RCPT TO' Remote Denial of Service
Multiple heap-based buffer overflows in RevilloC MailServer 1.21 and earlier allow remote attackers to cause a denial of
23RIESGO
abrir ↗Referência✓ VexDay Proof
Imageview 5 - '/Cookie/index.php' Local/Remote File Inclusion
Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary local
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.