Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados
34.638CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.662 exploits
Referência
CVE-2026-9407
CVE-2026-9407CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setFirewallType os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9406
CVE-2026-9406CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setRemoteCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9405
CVE-2026-9405CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injection
48RIESGO
abrir ↗
Referência✓ VexDay Proof
Invision Gallery 2.0.7 - 'readfile()' / SQL Injection
CVE-2006-5205—webappsphp
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (do
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Invision Gallery 2.0.7 - 'readfile()' / SQL Injection
CVE-2006-5206—webappsphp
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Referência
CVE-2010-4981
CVE-2010-4981—
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpMyTeam 2.0 - 'smileys_dir' Remote File Inclusion
CVE-2006-5207—webappsphp
PHP remote file inclusion vulnerability in images/smileys/smileys_packs.php in phpMyTeam 2.0, when register_globals is e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SHTTPD 1.34 - 'POST' Remote Buffer Overflow
CVE-2006-5216—remotewindows
Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary cod
50RIESGO
abrir ↗
Referência✓ VexDay Proof
Dimension of phpBB 0.2.6 - 'phpbb_root_path' Remote File Inclusions
CVE-2006-5222—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Security Suite Mod 1.0.0 - 'logger_engine.php' Remote File Inclusion
CVE-2006-5224—webappsphp
PHP remote file inclusion vulnerability in includes/logger_engine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Freenews 1.1 - 'moteur.php' Remote File Inclusion
CVE-2006-5226—webappsphp
PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FreeForum 0.9.7 - 'forum.php' Remote File Inclusion
CVE-2006-5230—webappsphp
PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute a
23RIESGO
abrir ↗
Referência
CVE-2021-47978
CVE-2021-47978MEDIUM
ProcessMaker 3.5.4 Local File Inclusion via Path Traversal
33RIESGO
abrir ↗
Referência
CVE-2010-4984
CVE-2010-4984—
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
IncCMS Core 1.0.0 - 'settings.php' Remote File Inclusion
CVE-2006-5304—webappsphp
PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Open Conference Systems 1.1.4 - 'fullpath' File Inclusion
CVE-2006-5308—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers
23RIESGO
abrir ↗
Referência
CVE-2010-4984
CVE-2010-4984—
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Prillian French Mod 0.8.0 - Remote File Inclusion
CVE-2006-5309—webappsphp
PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPMyConferences 8.0.2 - 'menu.inc.php' File Inclusion
CVE-2006-5310—webappsphp
PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TribunaLibre 3.12 Beta - 'ftag.php' Remote File Inclusion
CVE-2006-5314—webappsphp
PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2010-4986
CVE-2010-4986—
SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
registroTL - 'main.php' Remote File Inclusion
CVE-2006-5315—webappsphp
PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eboli - 'index.php' Remote File Inclusion
CVE-2006-5317—webappsphp
PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via
23RIESGO
abrir ↗
Referência
CVE-2010-4987
CVE-2010-4987—
SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
JASmine 0.0.2 - 'index.php' Remote File Inclusion
CVE-2006-5318—webappsphp
PHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmine-Web) allows remote attackers to execu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Foafgen 0.3 - 'redir.php' Local Source Disclosure
CVE-2006-5319—webappsphp
Directory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read arbitrary files via a .. (
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Album Photo Sans Nom 1.6 - Remote Source Disclosure
CVE-2006-5320—webappsphp
Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary fi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Cdsagenda 4.2.9 - 'SendAlertEmail.php' File Inclusion
CVE-2006-5384—webappsphp
PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 a
23RIESGO
abrir ↗
Referência
CVE-2010-4988
CVE-2010-4988—
PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB SpamOborona Mod 1.0b - Remote File Inclusion
CVE-2006-5385—webappsphp
PHP remote file inclusion vulnerability in admin/admin_spam.php in the SpamOborona 1.0b and earlier phpBB module allows
23RIESGO
abrir ↗
← anteriorpágina 274 / 723siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.