Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.445exploits catalogados
34.432CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8198Nuclei 4217Metasploit 3463✓ solo verificadosrecientespopularesriesgo
21.497 exploits
Referência✓ VexDay Proof
TorrentTrader Classic 1.07 - Multiple Vulnerabilities
CVE-2007-5312—webappsphp
Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mihalism Multi Host 2.0.7 - 'download.php' Remote File Disclosure
CVE-2007-6653—webappsphp
Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DaZPHP 0.1 - 'prefixdir' Local File Inclusion
CVE-2008-1696—webappsphp
Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when register_globals is enabled and magic_quotes
23RIESGO
abrir ↗
Referência✓ VexDay Proof
groone glinks 2.1 - Remote File Inclusion
CVE-2009-0463—webappsphp
PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute a
23RIESGO
abrir ↗
Referência
CVE-2012-1260
CVE-2012-1260—
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An
23RIESGO
abrir ↗
Referência
CVE-2020-37027
CVE-2020-37027CRITICAL
Sickbeard 0.1 - Remote Command Injection
48RIESGO
abrir ↗
Referência
CVE-2010-1467
CVE-2010-1467—
Multiple PHP remote file inclusion vulnerabilities in openUrgence Vaccin 1.03 allow remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência
CVE-2017-1000370
CVE-2017-1000370—
The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed wit
23RIESGO
abrir ↗
Referência
CVE-2017-1000370
CVE-2017-1000370—
The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed wit
23RIESGO
abrir ↗
Referência
CVE-2009-4801
CVE-2009-4801—
EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via re
23RIESGO
abrir ↗
Referência
CVE-2009-4670
CVE-2009-4670—
admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FlexPHPNews 0.0.5 - 'newsid' SQL Injection
CVE-2005-1237—webappsphp
SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência
CVE-2018-18856
CVE-2018-18856—
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS.
23RIESGO
abrir ↗
Referência
CVE-2018-18856
CVE-2018-18856—
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
myPHPCalendar 10192000b - 'cal_dir' Remote File Inclusion
CVE-2006-6812—webappsphp
Multiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote attackers to execute arbitrary PHP
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MeGaCheatZ 1.1 - Multiple SQL Injections
CVE-2007-6557—webappsphp
Multiple SQL injection vulnerabilities in MeGaCheatZ 1.1 allow remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência✓ VexDay Proof
minimal Gallery 0.8 - Remote File Disclosure
CVE-2008-0259—webappsphp
Multiple directory traversal vulnerabilities in _mg/php/mg_thumbs.php in minimal Gallery 0.8 allow remote attackers to r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DomPHP 0.82 - 'index.php' Local File Inclusion
CVE-2008-0745—webappsphp
Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CMME 1.12 - Local File Inclusion / Cross-Site Scripting / Cross-Site Request Forgery/Download Backup/Make Directory
CVE-2008-3924—webappsphp
The "Make a backup" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive information under the web
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Netartmedia Cars Portal 2.0 - SQL Injection
CVE-2008-5310—webappsphp
SQL injection vulnerability in image.php in NetArt Media Car Portal 2.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ASP Download 1.03 - Arbitrary Change Administrator Account
CVE-2008-6739—webappsasp
Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Koschtit Image Gallery 1.82 - Multiple Local File Inclusions
CVE-2009-1510—webappsphp
Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execut
23RIESGO
abrir ↗
Referência
CVE-2024-36840
CVE-2024-36840CRITICAL
SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code a
48RIESGO
abrir ↗
Referência
CVE-2024-36840
CVE-2024-36840CRITICAL
SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code a
48RIESGO
abrir ↗
Referência
CVE-2009-2780
CVE-2009-2780—
Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2009-4433
CVE-2009-4433—
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to injec
23RIESGO
abrir ↗
Referência
CVE-2009-4433
CVE-2009-4433—
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to injec
23RIESGO
abrir ↗
Referência
CVE-2014-3934
CVE-2014-3934—
SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2023-42628
CVE-2023-42628CRITICAL
Stored cross-site scripting (XSS) vulnerability in the Wiki widget in Liferay Portal 7.1.0 through 7.4.3.87, and Liferay
48RIESGO
abrir ↗
Referência
CVE-2023-42629
CVE-2023-42629CRITICAL
Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in Liferay Portal 7.4.2 through 7.4.3.87,
48RIESGO
abrir ↗
← anteriorpágina 166 / 717siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.