Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.794exploits catalogados
36.057CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
AjPortal2Php - 'PagePrefix' Remote File Inclusion
CVE-2007-2142—webappsphp
Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AJ Auction Web 2.0 - 'cate_id' SQL Injection
CVE-2008-2860—webappsphp
SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Site Lock 2.0 - 'index.php' SQL Injection
CVE-2008-2865—webappsphp
SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CaupoShop Classic 1.3 - 'saArticle[ID]' SQL Injection
CVE-2008-2866—webappsphp
SQL injection vulnerability in csc_article_details.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
E-topbiz ViralDX 2.07 - 'bannerid' SQL Injection
CVE-2008-2867—webappsphp
SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DUcalendar 1.0 - 'iEve' SQL Injection
CVE-2008-2868—webappsasp
SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to execu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Link ADS 1 - 'linkid' SQL Injection
CVE-2008-2869—webappsphp
SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ShareCMS 0.1 - Multiple SQL Injections
CVE-2008-2870—webappsphp
Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
shibby shop 2.2 - Multiple Vulnerabilities
CVE-2008-2873—webappsphp
sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AvailScript Classmate Script - 'viewprofile.php' SQL Injection
CVE-2008-4375—webappsphp
SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Live TV Script - 'index.php?mid' SQL Injection
CVE-2008-4376—webappsphp
SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Natterchat 1.1 - Authentication Bypass
CVE-2008-7049—webappsphp
Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Jokes & Funny Pics Script - 'sb_jokeid' SQL Injection
CVE-2008-2874—webappsphp
SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpAuction 3.2.1 - 'item.php' SQL Injection
CVE-2008-2900—webappsphp
SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Advanced Webhost Billing System (AWBS) 2.7.1 - 'news.php' SQL Injection
CVE-2008-2903—webappsphp
SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo 4.6.4 - 'Output.php' Remote File Inclusion
CVE-2008-2905—webappsphp
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and e
43RIESGO
abrir ↗
Referência✓ VexDay Proof
Natterchat 1.12 - Authentication Bypass
CVE-2008-7049—webappsphp
Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebChamado 1.1 - 'tsk_id' SQL Injection
CVE-2008-2906—webappsphp
SQL injection vulnerability in lista_anexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre Job Board - 'JobSearch.php' SQL Injection
CVE-2008-2915—webappsphp
Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre ADS Portal 2.0 - SQL Injection
CVE-2008-2916—webappsphp
Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remot
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CJG EXPLORER PRO 3.2 - 'g_pcltar_lib_dir' Remote File Inclusion
CVE-2007-2199—webappsphp
PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vi
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Dana IRC 1.3 - Remote Buffer Overflow (PoC)
CVE-2008-2922—doswindows
Stack-based buffer overflow in artegic Dana IRC client 1.3 and earlier allows remote attackers to cause a denial of serv
23RIESGO
abrir ↗
Referência✓ VexDay Proof
mIRC 6.34 - Remote Buffer Overflow
CVE-2008-4449—remotewindows
Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIV
50RIESGO
abrir ↗
Referência✓ VexDay Proof
LogMeIn Remote Access Utility - ActiveX Memory Corruption (Denial of Service)
CVE-2008-7053—doswindows
LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash)
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-CMS 1 - 'Username' Blind SQL Injection
CVE-2009-0407—webappsphp
SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery
CVE-2008-7058—webappsphp
Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authenticati
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution
CVE-2008-2950—locallinux
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Visual Basic Enterprise Edition SP6 - 'vb6skit.dll' Buffer Overflow (PoC)
CVE-2008-2959—doswindows
Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might al
28RIESGO
abrir ↗
Referência✓ VexDay Proof
ICQ Toolbar 2.3 - ActiveX Remote Denial of Service
CVE-2008-7136—doswindows
toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CMS Mini 0.2.2 - Multiple Local File Inclusions
CVE-2008-2961—webappsphp
Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitrar
23RIESGO
abrir ↗
← anteriorpágina 11 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.