Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.624 exploits
Referência✓ VexDay Proof
Mint Haber Sistemi 2.7 - 'duyuru.asp?id' SQL Injection
CVE-2007-0304—webappsphp
SQL injection vulnerability in duyuru.asp in MiNT Haber Sistemi 2.7 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
YourFreeWorld Blog Blaster - 'tr.php' SQL Injection
CVE-2008-4883—webappsphp
SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FLDS 1.2a - 'lpro.php' SQL Injection
CVE-2008-5779—webappsphp
SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AskPert - Authentication Bypass
CVE-2008-6309—webappsphp
SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Groone's GLink ORGanizer - 'index.php?cat' SQL Injection
CVE-2009-0299—webappsphp
SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Groone's GLink ORGanizer 2.1 - 'cat' Blind SQL Injection
CVE-2009-0299—webappsphp
SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2010-4186
CVE-2010-4186—
SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10
23RIESGO
abrir ↗
Referência
CVE-2009-3002
CVE-2009-3002—
The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows lo
23RIESGO
abrir ↗
Referência
CVE-2009-2328
CVE-2009-2328—
admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remot
23RIESGO
abrir ↗
Referência
CVE-2010-4913
CVE-2010-4913—
Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2007-5817
CVE-2007-5817MEDIUM
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1
33RIESGO
abrir ↗
Referência
CVE-2018-17775
CVE-2018-17775—
Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local us
23RIESGO
abrir ↗
Referência
CVE-2018-17775
CVE-2018-17775—
Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local us
23RIESGO
abrir ↗
Referência
CVE-2022-23909
CVE-2022-23909—
There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This might
23RIESGO
abrir ↗
Referência
CVE-2009-2234
CVE-2009-2234—
Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LocazoList 2.01a beta5 - 'subcatID' SQL Injection
CVE-2007-0129—webappsasp
SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ThWboard 3.0b2.84-php5 - SQL Injection / Code Execution
CVE-2007-0340—webappsphp
SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to execu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LightRO CMS 1.0 - 'index.php?projectid' SQL Injection
CVE-2007-0904—webappsphp
SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module debaser 0.92 - 'genre.php' Blind SQL Injection
CVE-2007-1805—webappsphp
SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Phil-a-Form 1.2.0.0 - SQL Injection
CVE-2007-2933—webappsphp
SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Prozilla Directory Script - 'Directory.php?cat_id' SQL Injection
CVE-2007-3809—webappsphp
Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PNPHPBB2 < 1.2i - 'viewforum.php' SQL Injection
CVE-2007-3584—webappsphp
SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component Remository - 'cat' SQL Injection
CVE-2007-4505—webappsphp
SQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
bwired - 'index.php?newsID' SQL Injection
CVE-2007-3976—webappsphp
SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the new
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Envolution 1.1.0 - 'topic' SQL Injection
CVE-2007-4253—webappsphp
SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Blue Dragon CMS 3.0.0 - SQL Injection
CVE-2007-4312—webappsphp
SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Autodealers CMS AutOnline - 'id' SQL Injection
CVE-2008-4074—webappsphp
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Injader CMS 2.1.1 - 'id' SQL Injection
CVE-2008-5890—webappsphp
SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component live chat - SQL Injection / Open Proxy
CVE-2008-6881—webappsphp
Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers
23RIESGO
abrir ↗
Referência
CVE-2023-25187
CVE-2023-25187MEDIUM
An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures
33RIESGO
abrir ↗
← anteriorpágina 243 / 721siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.