Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
71.957exploits catalogados
32.195CVEs con explotación pública
1932probados en laboratorio
TodosExploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8182Nuclei 4217Metasploit 3462✓ solo verificadosrecientespopularesriesgo
20.003 exploits
Referência
CVE-2014-3080
Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware
23RIESGO
abrir ↗Referência
ISPworker 1.21 - 'download.php' Remote File Disclosure
Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary
23RIESGO
abrir ↗Referência
CVE-2014-0984
The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation
23RIESGO
abrir ↗Referência
CVE-2010-0673
SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress
23RIESGO
abrir ↗Referência
CVE-2010-0673
SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress
23RIESGO
abrir ↗Referência
CVE-2021-30147
DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.
23RIESGO
abrir ↗Referência
CVE-2012-1669
Directory traversal vulnerability in index.php in phpMoneyBooks before 1.0.3 allows remote attackers to include and exec
23RIESGO
abrir ↗Referência
CVE-2012-1669
Directory traversal vulnerability in index.php in phpMoneyBooks before 1.0.3 allows remote attackers to include and exec
23RIESGO
abrir ↗Referência
CVE-2017-14838
TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.
23RIESGO
abrir ↗Referência
CVE-2017-14840
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.
23RIESGO
abrir ↗Referência
CVE-2017-14839
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.
23RIESGO
abrir ↗Referência
Xt-Stats 2.4.0.b3 (server_base_dir) - Remote File Inclusion
PHP remote file inclusion vulnerability in xt_counter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to ex
23RIESGO
abrir ↗Referência
CVE-2013-3527
Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Referência
CVE-2013-3527
Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Referência
Zomplog 3.8 - 'force_download.php' Remote File Disclosure
Directory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote attackers to read arbitrary
23RIESGO
abrir ↗Referência
Quick.Cart 2.2 - Local/Remote File Inclusion / Remote Code Execution
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to
23RIESGO
abrir ↗Referência
e-cart.biz Shopping Cart - Arbitrary File Upload
Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attacker
23RIESGO
abrir ↗Referência
CVE-2010-2892
gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated a
23RIESGO
abrir ↗Referência
CVE-2009-2238
Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXRea
23RIESGO
abrir ↗Referência
FlexPHPDirectory 0.0.1 - Authentication Bypass
Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Referência
minewebcms 1.15.2 - Cross-site Scripting (XSS)
Cross-site Scripting (XSS) - Stored in mineweb/minewebcms
33RIESGO
abrir ↗Referência
Soholaunch Pro 4.9 r36 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Soholaunch Pro Edition 4.9 r46 and earlier, when register_globals
23RIESGO
abrir ↗Referência
Aigaion 1.2.1 - 'DIR' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1 and earlier
23RIESGO
abrir ↗Referência
Claroline 1.8.0 rc1 - 'import.lib.php' Remote File Inclusion
PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote
23RIESGO
abrir ↗Referência
InteliEditor 1.2.x - 'lib.editor.inc.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lib.editor.inc.php in Intelimen InteliEditor 1.2.x allows remote attackers to
23RIESGO
abrir ↗Referência
CVE-2018-10110
D-Link DIR-615 T1 devices allow XSS via the Add User feature.
23RIESGO
abrir ↗Referência
CVE-2018-10110
D-Link DIR-615 T1 devices allow XSS via the Add User feature.
23RIESGO
abrir ↗Referência
CVE-2017-11356
The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users
23RIESGO
abrir ↗Referência
openEngine 2.0 beta4 - Remote File Inclusion
PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote a
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.