Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.305exploits catalogados

36.465CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

SazCart 1.5.1 - 'prodid' SQL Injection

CVE-2008-2411—webappsphp

SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Article Friendly Pro/Standard - SQL Injection

CVE-2008-3649—webappsphp

SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (PoC)

CVE-2008-4193—doswindows

Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t

60RIESGO

abrir ↗

Referência✓ VexDay Proof

CzarNews 1.20 - 'cookie' SQL Injection

CVE-2008-4203—webappsphp

SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Pardal CMS 0.2.0 - Blind SQL Injection

CVE-2009-0279—webappsphp

SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Director 0.21 - Remote Command Execution

CVE-2009-0604—webappsphp

SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

EZ-Blog Beta2 - 'category' SQL Injection

CVE-2009-1626—webappsphp

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled,

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Prozilla Hosting Index - 'cat_id' SQL Injection

CVE-2008-2083—webappsphp

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation

CVE-2008-4190—locallinux

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mic_blog 0.0.3 - SQL Injection / Privilege Escalation

CVE-2008-6805—webappsphp

Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BP Blog 7.0 - 'layout' SQL Injection

CVE-2007-1445—webappsasp

SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module PostSchedule 1.0 - 'eid' SQL Injection

CVE-2008-2012—webappsphp

SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Jadu CMS for Government - 'recruit_details.php' SQL Injection

CVE-2008-5988—webappsphp

SQL injection vulnerability in scripts/recruit_details.php in Jadu CMS for Government allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ProQuiz 1.0 - Authentication Bypass

CVE-2008-6312—webappsphp

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Social Engine 3.06 - 'category_id' SQL Injection

CVE-2009-0400—webappsphp

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência✓ VexDay Proof

iScripts Socialware - 'id' SQL Injection

CVE-2008-1790—webappsphp

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbit

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ECShop 2.5.0 - 'order_sn' SQL Injection

CVE-2009-1622—webappsphp

SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via th

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MiniBB 1.5a - Remote File Inclusion

CVE-2006-3690—webappsphp

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute ar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

WGCC 0.5.6b - 'quiz.php' SQL Injection

CVE-2006-5514—webappsphp

SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attack

23RIESGO

abrir ↗

Referência✓ VexDay Proof

D2-Shoutbox 4.2 IPB Mod - 'load' SQL Injection

CVE-2006-1153—webappsphp

SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load pa

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Photocart 3.9 - Multiple SQL Injections

CVE-2008-3788—webappsphp

Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote at

23RIESGO

abrir ↗

Referência✓ VexDay Proof

EfesTECH Haber 5.0 - 'id' SQL Injection

CVE-2007-2662—webappsphp

SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id p

23RIESGO

abrir ↗

Referência✓ VexDay Proof

vShare YouTube Clone 2.6 - 'tid' SQL Injection

CVE-2008-2223—webappsphp

SQL injection vulnerability in group_posts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP League 0.82 - 'classement.php' SQL Injection

CVE-2006-5676—webappsasp

SQL injection vulnerability in consult/classement.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

easyTrade 2.x - 'id' SQL Injection

CVE-2008-2790—webappsphp

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

DigiAffiliate 1.4 - 'id' SQL Injection

CVE-2007-0306—webappsasp

SQL injection vulnerability in visu_user.asp in Digiappz DigiAffiliate 1.4 and earlier allows remote attackers to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Car Manager 1.1 - SQL Injection

CVE-2007-1704—webappsphp

SQL injection vulnerability in index.php in the Car Manager (com_resman) 1.1 and earlier component for Joomla! allows re

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FlashGet 1.9 - 'FTP PWD Response' Remote Buffer Overflow (PoC)

CVE-2008-4321—doswindows

Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long res

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FlashGet 1.9.0.1012 - 'FTP PWD Response' Remote Buffer Overflow (SafeSEH)

CVE-2008-4321—remotewindows

Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long res

23RIESGO

abrir ↗

Referência✓ VexDay Proof

celerbb 0.0.2 - Multiple Vulnerabilities

CVE-2009-0851—webappsphp

Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to ex

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.