Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.624 exploits
Referência
CVE-2012-10020
CVE-2012-10020CRITICAL
FoxyPress <= 0.4.2.1 - Arbitrary File Upload
63RIESGO
abrir ↗
Referência✓ VexDay Proof
PortailPHP mod_phpalbum 2.1.5 - 'chemin' Remote File Inclusion
CVE-2006-4498—webappsphp
PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows remo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vitrax Pre-modded 1.0.6-r3 - Remote File Inclusion
CVE-2006-4779—webappsphp
PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier
23RIESGO
abrir ↗
Referência✓ VexDay Proof
sBLOG 0.7.3 Beta - '/inc/lang.php' Local File Inclusion
CVE-2007-1801—webappsphp
Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Jobs 2.4 - 'cid' SQL Injection
CVE-2007-2370—webappsphp
SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods
CVE-2007-3633—remotewindows
Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DevMass Shopping Cart 1.0 - Remote File Inclusion
CVE-2007-6133—webappsphp
PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Anon Proxy Server 0.1000 - Remote Command Execution
CVE-2007-6459—webappsphp
Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharact
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NetRisk 2.0 - Cross-Site Scripting / SQL Injection
CVE-2008-4888—webappsphp
Cross-site scripting (XSS) vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
QuoteBook - Remote Configuration File Disclosure
CVE-2009-0828—webappsphp
QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Bloginator 1a - Cookie Bypass / SQL Injection
CVE-2009-1050—webappsphp
Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYou
23RIESGO
abrir ↗
Referência
CVE-2009-4627
CVE-2009-4627—
Directory traversal vulnerability in sources/_template_parser.php in Moa Gallery 1.2.0 and earlier allows remote attacke
23RIESGO
abrir ↗
Referência
CVE-2017-15972
CVE-2017-15972—
SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php
23RIESGO
abrir ↗
Referência
CVE-2017-15972
CVE-2017-15972—
SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php
23RIESGO
abrir ↗
Referência
CVE-2017-15973
CVE-2017-15973—
Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php.
23RIESGO
abrir ↗
Referência
CVE-2017-15973
CVE-2017-15973—
Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php.
23RIESGO
abrir ↗
Referência
CVE-2006-4611
CVE-2006-4611—
Buffer overflow in the _tor_resolve function in dsocks.c in dsocks before 1.4 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2020-14073
CVE-2020-14073—
XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can c
23RIESGO
abrir ↗
Referência
CVE-2021-25679
CVE-2021-25679—
The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. T
23RIESGO
abrir ↗
Referência
CVE-2010-1652
CVE-2010-1652—
Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote attac
23RIESGO
abrir ↗
Referência
CVE-2010-1652
CVE-2010-1652—
Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote attac
23RIESGO
abrir ↗
Referência
CVE-2018-10309
CVE-2018-10309—
The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Netref 4 - 'cat_for_aff.php' Source Code Disclosure
CVE-2006-5618—webappsphp
Directory traversal vulnerability in script/cat_for_aff.php in Netref 4 allows remote attackers to read arbitrary files
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Hot or Not Clone by Jnshosts.com - Database Backup Dump
CVE-2007-6603—webappsphp
Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attacke
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Rianxosencabos CMS 0.9 - Insecure Cookie Handling
CVE-2008-4244—webappsphp
Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the us
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MODx CMS 0.9.6.2 - Remote File Inclusion / Cross-Site Scripting
CVE-2008-5939—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows remote attackers to inject
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Apple Safari - 'ARGUMENTS' Array Integer Overflow HeapSpray (PoC)
CVE-2009-0070—dosmultiple
Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cau
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre Shopping Mall - Insecure Cookie Handling
CVE-2008-6232—webappsphp
Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
blogplus 1.0 - Multiple Local File Inclusions
CVE-2009-1246—webappsphp
Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary loc
23RIESGO
abrir ↗
Referência
CVE-2019-19781
CVE-2019-19781CRITICALbajo ataqueransomware
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RIESGO
abrir ↗
← anteriorpágina 253 / 721siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.