Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.305exploits catalogados
36.465CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
Jamroom 3.3.5 - Remote File Inclusion
CVE-2008-2883—webappsphp
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MyCMS 0.9.8 - Remote Command Execution (2)
CVE-2007-3586—webappsphp
Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass
CVE-2008-4612—webappsasp
Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebPortal CMS 0.6.0 - 'index.php' SQL Injection
CVE-2007-6664—webappsphp
SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Broadcast Machine 0.1 - Multiple Remote File Inclusions
CVE-2008-6287—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
fresh email script 1.0 - Multiple Vulnerabilities
CVE-2008-7042—webappsphp
PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution
CVE-2009-1278—webappsphp
Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attacker
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Minerva 2.0.8a Build 237 - 'phpbb_root_path' File Inclusion
CVE-2006-3028—webappsphp
PHP remote file inclusion vulnerability in stat_modules/users_age/module.php in Minerva 2.0.8a Build 237 and earlier all
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Adobe Reader - 'util.printf()' JavaScript Function Stack Overflow (2)
CVE-2008-2992HIGHbajo ataqueransomwarelocalwindows
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary c
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Libra PHP File Manager 1.18/2.0 - Local File Inclusion
CVE-2008-4319—webappsphp
fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass auth
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Update 2.7 - '/admin/uploads.php' Remote Code Execution
CVE-2006-6878—webappsphp
admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights[7] para
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component module autostand 1.0 - Remote File Inclusion
CVE-2007-2319—webappsphp
PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Blakord Portal Beta 1.3.A (All Modules) - SQL Injection
CVE-2007-6565—webappsphp
Multiple SQL injection vulnerabilities in Blakord Portal 1.3.A Beta and earlier allow remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Gelato - 'index.php?post' SQL Injection
CVE-2007-4918—webappsphp
SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Module XS-Mod 2.3.1 - Local File Inclusion
CVE-2008-1512—webappsphp
Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB allo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Aprox CMS Engine 5.1.0.4 - Local File Inclusion
CVE-2008-2895—webappsphp
Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Uebimiau Web-Mail 2.7.10/2.7.2 - Remote File Disclosure
CVE-2008-0140—webappsphp
Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP weather 2.2.2 - Local File Inclusion / Cross-Site Scripting
CVE-2008-5771—webappsphp
Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BNCwi 1.04 - Local File Inclusion
CVE-2008-5948—webappsphp
Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wotw 5.0 - Local/Remote File Inclusion
CVE-2008-6224—webappsphp
Directory traversal vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Telephone Directory 2008 - Arbitrary Delete Contact
CVE-2008-7180—webappsphp
del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request wit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ClipShare 2.6 - Remote User Password Change
CVE-2008-7188—webappsphp
ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the pr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
mxBB Module mx_blogs 2.0.0-beta - Remote File Inclusion
CVE-2008-1712—webappsphp
PHP remote file inclusion vulnerability in includes/functions_weblog.php in mxBB mx_blogs 2.0.0 beta allows remote attac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
YapBB 1.2 Beta2 - 'yapbb_session.php' Remote File Inclusion
CVE-2006-6633—webappsphp
PHP remote file inclusion vulnerability in include/yapbb_session.php in YapBB 1.2 Beta2 and earlier allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Orlando CMS 0.6 - Remote File Inclusion
CVE-2008-2854—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MiNBank 1.5.0 - Multiple Remote File Inclusions
CVE-2008-6006—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System (minba) 1.5.0 allow remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sofi WebGui 0.6.3 PRE - 'mod_dir' Remote File Inclusion
CVE-2008-6402—webappsphp
PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
pagetree CMS 0.0.2 Beta 0001 - Remote File Inclusion
CVE-2008-7067—webappsphp
PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
webframe 0.76 - Multiple File Inclusions
CVE-2009-0514—webappsphp
Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary lo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Potato News 1.0.0 - Local File Inclusion
CVE-2009-0722—webappsphp
Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbit
23RIESGO
abrir ↗
← anteriorpágina 135 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.