Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

21.662 exploits

Referência✓ VexDay Proof

SFS EZ BIZ PRO - SQL Injection

CVE-2008-6245—webappsphp

SQL injection vulnerability in track.php in Scripts For Sites (SFS) EZ BIZ PRO allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2011-4571

CVE-2011-4571—

SQL injection vulnerability in the Estate Agent (com_estateagent) component for Joomla! allows remote attackers to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Webring - 'cat' SQL Injection

CVE-2008-6246—webappsphp

SQL injection vulnerability in category.php in Scripts For Sites (SFS) EZ Webring allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Top Sites - SQL Injection

CVE-2008-6247—webappsphp

SQL injection vulnerability in topsite.php in Scripts For Sites (SFS) EZ Top Sites allows remote attackers to execute ar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Galatolo Web Manager 1.3a - Cross-Site Scripting / SQL Injection

CVE-2008-6249—webappsphp

SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Jadu Galaxies - 'categoryId' Blind SQL Injection

CVE-2008-6254—webappsphp

SQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

OpenASP 3.0 - Blind SQL Injection

CVE-2008-6257—webappsasp

SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Q-Shop 3.0 - Cross-Site Scripting / SQL Injection

CVE-2008-6258—webappsasp

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Q-Shop 3.0 - Cross-Site Scripting / SQL Injection

CVE-2008-6259—webappsasp

Cross-site scripting (XSS) vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Ultrastats 0.2.144/0.3.11 - 'serverid' SQL Injection

CVE-2008-6260—webappsphp

SQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência

CVE-2011-4572

CVE-2011-4572—

Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably

23RIESGO

abrir ↗

Referência✓ VexDay Proof

E-topbiz ADManager 4 - 'group' Blind SQL Injection

CVE-2008-6261—webappsphp

SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Cyberfolio 7.12.2 - 'theme' Local File Inclusion

CVE-2008-6265—webappsphp

Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to inclu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN WebShop 1.02 - SQL Injection / Cross-Site Scripting

CVE-2008-6268—webappsphp

SQL injection vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Apoll 0.7b - Authentication Bypass

CVE-2008-6270—webappsphp

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Apoll 0.7b - Authentication Bypass

CVE-2008-6272—webappsphp

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Family Project 2.x - Authentication Bypass

CVE-2008-6274—webappsphp

Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Bluo CMS 1.2 - Blind SQL Injection

CVE-2008-6281—webappsphp

SQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute arbitrary SQL commands via t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

z1exchange 1.0 - 'site' SQL Injection

CVE-2008-6284—webappsphp

SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência

CVE-2026-14617

CVE-2026-14617LOW

NousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer._filter_and_accumulate case sensitivity

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Active NewsLetter 4.3 - Authentication Bypass

CVE-2008-6286—webappsasp

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Tours Manager 1.0 - SQL Injection

CVE-2008-6289—webappsphp

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL comman

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPmyGallery 1.5beta - '/common-tpl-vars.php' Local/Remote File Inclusion

CVE-2008-6317—webappsphp

Directory traversal vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attacker

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CF_Calendar - 'calendarevent.cfm' SQL Injection

CVE-2008-6319—webappsasp

SQL injection vulnerability in calendarevent.cfm in CF_Calendar allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

cf shopkart 5.2.2 - SQL Injection / File Disclosure

CVE-2008-6320—webappsasp

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CFMBLOG - 'categorynbr' Blind SQL Injection

CVE-2008-6322—webappsasp

SQL injection vulnerability in index.cfm in CFMSource CFMBlog allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CF_Auction - Blind SQL Injection

CVE-2008-6323—webappsasp

SQL injection vulnerability in forummessages.cfm in CFMSource CF_Auction allows remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CF_Forum - Blind SQL Injection

CVE-2008-6324—webappsasp

SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ProQuiz 1.0 - Authentication Bypass

CVE-2008-6327—webappsphp

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Pre Job Board - Authentication Bypass

CVE-2008-6329—webappsphp

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.