Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.305exploits catalogados
36.465CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
The Classified Ad System 1.0 - 'main' SQL Injection
CVE-2006-6349—webappsasp
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component ChronoForms 2.3.5 - Remote File Inclusion
CVE-2008-0567—webappsphp
Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for J
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Downstat 1.8 - 'art' Remote File Inclusion
CVE-2006-4827—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mindmeld 1.2.0.10 - Multiple Remote File Inclusions
CVE-2008-0572—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP
28RIESGO
abrir ↗
Referência✓ VexDay Proof
SafeNet 10.4.0.12 - 'IPSecDrv.sys' Local kernel Ring0 SYSTEM
CVE-2008-0573—localwindows
IPSecDrv.sys 10.4.0.12 in SafeNET HighAssurance Remote and SoftRemote allows local users to gain privileges via a crafte
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component Shambo2 - 'itemID' SQL Injection
CVE-2008-0606—webappsphp
SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)
CVE-2008-0590—doswindows
Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of servic
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Linux Kernel 2.6.17 < 2.6.24.1 - 'vmsplice' Local Privilege Escalation (2)
CVE-2008-0600—locallinux
The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer befo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
All Club CMS 0.0.2 - 'index.php' SQL Injection
CVE-2008-0601—webappsphp
SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
All Club CMS 0.0.1f - 'index.php' Local File Inclusion
CVE-2008-0602—webappsphp
Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to inc
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component 'com_awesom' 0.3.2 - 'listid' SQL Injection
CVE-2008-0603—webappsphp
SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RMSOFT Gallery System 2.0 - 'id' SQL Injection
CVE-2008-0611—webappsphp
SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
GNUTURK 2G - 't_id' SQL Injection
CVE-2006-4867—webappsphp
SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Update 2.7 - '/admin/uploads.php' Remote Code Execution
CVE-2006-6879—webappsphp
Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated us
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Update 2.7 - Multiple Vulnerabilities
CVE-2006-6879—webappsphp
Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated us
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ProgSys 0.156 - 'RR.php' Remote File Inclusion
CVE-2006-4944—webappsphp
PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Digital WebShop 1.128 - Multiple Remote File Inclusions
CVE-2006-4945—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BCWB 0.99 - 'ROOT_PATH' Remote File Inclusion
CVE-2006-4946—webappsphp
PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PBLang 4.66z - 'temppath' Remote File Inclusion
CVE-2006-5062—webappsphp
PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows re
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Stats 0.1.9.1b - 'ip' SQL Injection
CVE-2006-7172—webappsphp
Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Claroline 1.8.0 rc1 - 'import.lib.php' Remote File Inclusion
CVE-2006-5256—webappsphp
PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Prillian French Mod 0.8.0 - Remote File Inclusion
CVE-2006-5309—webappsphp
PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPMyConferences 8.0.2 - 'menu.inc.php' File Inclusion
CVE-2006-5310—webappsphp
PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB News Defilante Horizontale 4.1.1 - Remote File Inclusion
CVE-2006-5415—webappsphp
PHP remote file inclusion vulnerability in includes/functions_newshr.php in the News Defilante Horizontale 4.1.1 and ear
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB SearchIndexer Mod - 'archive_topic.php' Remote File Inclusion
CVE-2006-5418—webappsphp
PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer)
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Specimen Image Database - 'client.php' Remote File Inclusion
CVE-2006-5419—webappsphp
PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when regis
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service
CVE-2007-0120—doswindows
Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of ser
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Quote&Ordering System 1.0 - 'ordernum' Multiple Vulnerabilities
CVE-2007-0144—webappsasp
Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authent
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Classifieds 7.1 - 'detail.php' SQL Injection
CVE-2006-5828—webappsphp
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ImageStation - 'SonyISUpload.cab' 1.0.0.38 ActiveX Buffer Overflow
CVE-2008-0748—remotewindows
Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyIS
28RIESGO
abrir ↗
← anteriorpágina 171 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.