Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados

34.679CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

21.692 exploits

Referência

CVE-2010-2122

CVE-2010-2122—

Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r

43RIESGO

abrir ↗

Referência✓ VexDay Proof

EntertainmentScript 1.4.0 - 'page.php' Local File Inclusion

CVE-2008-2459—webappsphp

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execut

23RIESGO

abrir ↗

Referência

CVE-2010-2122

CVE-2010-2122—

Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r

43RIESGO

abrir ↗

Referência✓ VexDay Proof

FubarForum 1.5 - 'index.php' Local File Inclusion

CVE-2008-2887—webappsphp

Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and exec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Minishowcase 09b136 - 'lang' Local File Inclusion

CVE-2008-3390—webappsphp

Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when register_glob

23RIESGO

abrir ↗

Referência✓ VexDay Proof

EPShop < 3.0 - 'pid' SQL Injection

CVE-2008-3412—webappsphp

SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

GC Auction Platinum - 'cate_id' SQL Injection

CVE-2008-3413—webappsphp

SQL injection vulnerability in category.php in Greatclone GC Auction Platinum allows remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Kure 0.6.3 - 'index.php' Local File Inclusion

CVE-2008-4632—webappsphp

Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

nicLOR Sito - includefile Local File Inclusion

CVE-2008-6290—webappsphp

Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_gp

23RIESGO

abrir ↗

Referência

CVE-2024-34833

CVE-2024-34833CRITICAL

Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settin

48RIESGO

abrir ↗

Referência

CVE-2010-3419

CVE-2010-3419—

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote atta

23RIESGO

abrir ↗

Referência

CVE-2021-4434

CVE-2021-4434CRITICAL

Social Warfare <= 3.5.2 - Remote Code Execution

48RIESGO

abrir ↗

Referência

CVE-2012-2105

CVE-2012-2105—

Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2010-3419

CVE-2010-3419—

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote atta

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Vivvo Article Manager 3.4 - 'root' Local File Inclusion

CVE-2007-1031—webappsphp

Directory traversal vulnerability in include/db_conn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote att

23RIESGO

abrir ↗

Referência

CVE-2011-0635

CVE-2011-0635—

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitra

23RIESGO

abrir ↗

Referência

CVE-2009-3201

CVE-2009-3201—

Integer overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a denial of service (appli

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPRunner 4.2 - 'SearchOption' Blind SQL Injection

CVE-2009-0964—webappsphp

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows at

23RIESGO

abrir ↗

Referência

CVE-2019-12801

CVE-2019-12801—

out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Nam

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mole 2.1.0 - 'viewsource.php' Remote File Disclosure

CVE-2008-1857—webappsphp

Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers

23RIESGO

abrir ↗

Referência

CVE-2009-3211

CVE-2009-3211—

Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remot

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SiteAdmin CMS - 'art' SQL Injection

CVE-2008-3414—webappsphp

SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TorrentVolve 1.4 - 'deleteTorrent' Delete Arbitrary File

CVE-2009-2101—webappsphp

Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote at

23RIESGO

abrir ↗

Referência✓ VexDay Proof

IceBB 1.0-RC9.2 - Blind SQL Injection / Session Hijacking

CVE-2008-3416—webappsphp

SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência

CVE-2018-19829

CVE-2018-19829—

Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities

CVE-2008-5878—webappsphp

Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

yourplace 1.0.2 - Multiple Vulnerabilities / Remote Code Execution

CVE-2008-6773—webappsphp

Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authen

23RIESGO

abrir ↗

Referência✓ VexDay Proof

2532/Gigs 1.2.2 Stable - Multiple Vulnerabilities

CVE-2008-6901—webappsphp

Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when register_globals is enabled and

23RIESGO

abrir ↗

Referência

CVE-2018-11502

CVE-2018-11502—

An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display t

23RIESGO

abrir ↗

Referência

CVE-2018-11502

CVE-2018-11502—

An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display t

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.