Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.526exploits catalogados
36.593CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.475Referência 23.152GitHub PoC 15.158VulnCheck XDB 8883Nuclei 4365Metasploit 3493✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion
CVE-2010-2920—webappsphp09 abr 2010
Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allow
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit)
CVE-2010-1423—localwindows09 abr 2010
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 U
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AWDwall 1.5.4 - Local File Inclusion / SQL Injection
CVE-2010-1493—webappsphp08 abr 2010
SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to e
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor 'librpc.dll' Signedness Error - Remote Code Execution
CVE-2009-2753—dosmultiple08 abr 2010
Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portma
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component AWDwall 1.5.4 - Local File Inclusion / SQL Injection
CVE-2010-1494—webappsphp08 abr 2010
Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to re
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Multiple Vendor 'librpc.dll' Signedness Error - Remote Code Execution
CVE-2009-2754—dosmultiple08 abr 2010
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmap
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component VJDEO 1.0 - Local File Inclusion
CVE-2010-1354—webappsphp07 abr 2010
Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers t
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component XOBBIX 1.0 - 'prodid' SQL Injection
CVE-2010-5053—webappsphp06 abr 2010
SQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion
CVE-2010-1979—webappsphp06 abr 2010
Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla! allows remo
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Freestyle FAQ Lite 1.3 - 'faqid' SQL Injection
CVE-2010-1529—webappsphp06 abr 2010
SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote atta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component News Portal 1.5.x - Local File Inclusion
CVE-2010-1312—webappsphp06 abr 2010
Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion
CVE-2010-1977—webappsphp06 abr 2010
Directory traversal vulnerability in the J!WHMCS Integrator (com_jwhmcs) component 1.5.0 for Joomla! allows remote attac
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion
CVE-2010-1313—webappsphp06 abr 2010
Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when ma
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin NextGEN Gallery 1.5.1 - Cross-Site Scripting
CVE-2010-1186—webappsphp06 abr 2010
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion
CVE-2010-1980—webappsphp06 abr 2010
Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Highslide 1.5 - Local File Inclusion
CVE-2010-1314—webappsphp06 abr 2010
Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote a
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Juke Box 1.7 - Local File Inclusion
CVE-2010-1352—webappsphp06 abr 2010
Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Fabrik 2.0 - Local File Inclusion
CVE-2010-1981—webappsphp06 abr 2010
Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read a
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Jzip 1.3 - '.zip' Unicode Buffer Overflow (PoC)
CVE-2010-5300—doswindows06 abr 2010
Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JInventory 1.23.02 - Local File Inclusion
CVE-2010-1305—webappsphp05 abr 2010
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component SVMap 1.1.1 - Local File Inclusion
CVE-2010-1308—webappsphp05 abr 2010
Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read a
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Magic Updater - Local File Inclusion
CVE-2010-1307—webappsphp05 abr 2010
Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samba 3.0.10 (OSX) - 'lsa_io_trans_names' Heap Overflow (Metasploit)
CVE-2007-2446—remoteosx05 abr 2010
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component LoginBox - Local File Inclusion
CVE-2010-1353—webappsphp05 abr 2010
Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to re
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Shoutbox Pro - Local File Inclusion
CVE-2010-1534—webappsphp05 abr 2010
Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to re
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samba 3.0.24 (Solaris) - 'lsa_io_trans_names' Heap Overflow (Metasploit)
CVE-2007-2446—remotesolaris05 abr 2010
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component redTWITTER 1.0 - Local File Inclusion
CVE-2010-1983—webappsphp04 abr 2010
Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Facil-CMS 0.1RC2 - Local/Remote File Inclusion
CVE-2008-7176—webappsphp04 abr 2010
Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Uiga Proxy - Remote File Inclusion
CVE-2010-1528—webappsphp04 abr 2010
PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eZip Wizard 3.0 - '.zip' File (SEH)
CVE-2009-1028—localwindows04 abr 2010
Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .z
50RIESGO
abrir ↗
← anteriorpágina 213 / 636siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.