Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.305exploits catalogados
36.465CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
WR-Meeting 1.0 - 'msnum' Local File Disclosure
Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magic_quotes_gpc is disabled, allows remote attac
23RIESGO
abrir ↗Referência✓ VexDay Proof
jsite 1.0 oe - SQL Injection / Local File Inclusion
Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
TriO 2.1 - 'browse.php' SQL Injection
SQL injection vulnerability in browse.php in TriO 2.1 and earlier allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Referência✓ VexDay Proof
txtCMS 0.3 - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in txtCMS 0.3, when register_globals is enabled and magic_quotes_gpc is d
23RIESGO
abrir ↗Referência✓ VexDay Proof
TopperMod 1.0 - 'mod.php' Local File Inclusion
Directory traversal vulnerability in mod.php in TopperMod 1.0 allows remote attackers to include and execute arbitrary l
23RIESGO
abrir ↗Referência✓ VexDay Proof
Joomla! Component netinvoice 1.2.0 SP1 - SQL Injection
SQL injection vulnerability in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to exe
23RIESGO
abrir ↗Referência✓ VexDay Proof
phpCommunityCalendar 4.0.3 - Cross-Site Scripting / SQL Injection
Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbit
23RIESGO
abrir ↗Referência✓ VexDay Proof
SetCMS 3.6.5 - Remote Command Execution
Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
poweraward 1.1.0 rc1 - Local File Inclusion / Cross-Site Scripting
Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when register_globals is enabled, allow remote att
23RIESGO
abrir ↗Referência✓ VexDay Proof
Feed CMS 1.07.03.19b - 'lang' Local File Inclusion
Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and exe
23RIESGO
abrir ↗Referência✓ VexDay Proof
ThaiQuickCart 3 - 'sLanguage' Cookie Local File Inclusion
Directory traversal vulnerability in qc/index.php in ThaiQuickCart 3 allows remote attackers to read arbitrary files via
23RIESGO
abrir ↗Referência✓ VexDay Proof
Pie Web m{a_e}sher mod rss 0.1 - Remote File Inclusion
PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_gl
23RIESGO
abrir ↗Referência✓ VexDay Proof
Cybershade CMS 0.2b - 'index.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in index.php in Cybershade CMS 0.2b, when register_globals is enabled
23RIESGO
abrir ↗Referência✓ VexDay Proof
TinXCMS 1.1 - Local File Inclusion / Cross-Site Scripting
Multiple directory traversal vulnerabilities in TinX/cms 1.1, when register_globals is enabled, allow remote attackers t
23RIESGO
abrir ↗Referência✓ VexDay Proof
Joomla! Component MailTo - 'article' SQL Injection
SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗Referência✓ VexDay Proof
NuStore 1.0 - 'Products.asp' SQL Injection
SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Referência✓ VexDay Proof
1024 CMS 1.3.1 - Local File Inclusion / SQL Injection
SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows remote attackers to execute arb
23RIESGO
abrir ↗Referência✓ VexDay Proof
polypager 1.0rc2 - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗Referência✓ VexDay Proof
LoveCMS 1.6.2 Final - Update Settings
LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in
23RIESGO
abrir ↗Referência✓ VexDay Proof
DomPHP 0.81 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execut
23RIESGO
abrir ↗Referência✓ VexDay Proof
Anata CMS 1.0b5 - 'change.php' Arbitrary Add Admin
change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges
23RIESGO
abrir ↗Referência✓ VexDay Proof
Igloo 0.1.9 - 'Wiki.php' Remote File Inclusion
PHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows remote attackers to exe
23RIESGO
abrir ↗Referência✓ VexDay Proof
ASPPortal 4.0.0 - 'default1.asp' SQL Injection
SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗Referência✓ VexDay Proof
SazCart 1.5.1 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when register_globals is enabled, allow remote atta
23RIESGO
abrir ↗Referência✓ VexDay Proof
LimeSurvey 4.1.11 - 'File Manager' Path Traversal
LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileM
60RIESGO
abrir ↗Referência✓ VexDay Proof
TotalCalendar 2.402 - 'view_event.php' SQL Injection
SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbi
23RIESGO
abrir ↗Referência✓ VexDay Proof
vcart 3.3.2 - Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code
23RIESGO
abrir ↗Referência✓ VexDay Proof
Alstrasoft e-Friends 4.21 - Admin Session Retrieve
SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗Referência✓ VexDay Proof
Interact 2.4.1 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when regis
23RIESGO
abrir ↗Referência✓ VexDay Proof
cmsWorks 2.2 RC4 - 'mod_root' Remote File Inclusion
PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when register_globals is en
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.