Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.559exploits catalogados

34.978CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8542Nuclei 4243Metasploit 3472✓ solo verificadosrecientes populares riesgo

21.899 exploits

Referência✓ VexDay Proof

PHPEcho CMS 2.0 - 'id' SQL Injection

CVE-2008-0355—webappsphp

SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Small Axe 0.3.1 - 'cfile' Remote File Inclusion

CVE-2008-0376—webappsphp

PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Crystal Reports XI Release 2 (Enterprise Tree Control) - ActiveX Buffer Overflow (Denial of Service) (PoC)

CVE-2008-0379—doswindows

Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Digital Data Communications - 'RtspVaPgCtrl' Class Remote Buffer Overflow

CVE-2008-0380—remotewindows

Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows re

28RIESGO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.10 - Multiple Vulnerabilities

CVE-2008-0382—webappsphp

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via

35RIESGO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.10 - Remote Code Execution

CVE-2008-0382—webappsphp

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via

35RIESGO

abrir ↗

Referência✓ VexDay Proof

OpenBSD 4.2 - 'rtlabel_id2name()' Local Null Pointer Dereference Denial of Service

CVE-2008-0384—dosbsd

OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an int

23RIESGO

abrir ↗

Referência✓ VexDay Proof

alitalk 1.9.1.1 - Multiple Vulnerabilities

CVE-2008-0391—webappsphp

inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Basic Enterprise 6 SP6 - '.dsr' File Handling Buffer Overflow

CVE-2008-0392—localwindows

Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to e

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection

CVE-2008-0429—webappsphp

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

360 Web Manager 3.0 - 'IDFM' SQL Injection

CVE-2008-0430—webappsphp

SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

flinx 1.3 - 'id' SQL Injection

CVE-2008-0468—webappsphp

SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Persits XUpload 3.0 - 'AddFile()' Remote Buffer Overflow

CVE-2008-0492—remotewindows

Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUplo

43RIESGO

abrir ↗

Referência✓ VexDay Proof

Bigware Shop 2.0 - 'pollid' SQL Injection

CVE-2008-0498—webappsphp

SQL injection vulnerability in main_bigware_53.tpl.php in Bigware Shop 2.0 allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpMyClub 0.0.1 - 'page_courante' Local File Inclusion

CVE-2008-0501—webappsphp

Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local file

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component EstateAgent 0.1 - SQL Injection

CVE-2008-0517—webappsphp

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Recipes 1.00 - 'id' SQL Injection

CVE-2008-0518—webappsphp

SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component jokes 1.0 - 'cat' SQL Injection

CVE-2008-0519—webappsphp

SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo and Joomla! allows remo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Simple Forum 3.2 - File Disclosure / Cross-Site Scripting

CVE-2008-0541—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in forum.php in Gerd Tentler Simple Forum 3.2 allow remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Links 1.3 - 'id' SQL Injection

CVE-2008-0565—webappsphp

SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ChronoForms 2.3.5 - Remote File Inclusion

CVE-2008-0567—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for J

35RIESGO

abrir ↗

Referência✓ VexDay Proof

Mindmeld 1.2.0.10 - Multiple Remote File Inclusions

CVE-2008-0572—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP

28RIESGO

abrir ↗

Referência✓ VexDay Proof

SafeNet 10.4.0.12 - 'IPSecDrv.sys' Local kernel Ring0 SYSTEM

CVE-2008-0573—localwindows

IPSecDrv.sys 10.4.0.12 in SafeNET HighAssurance Remote and SoftRemote allows local users to gain privileges via a crafte

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ibProArcade 3.3.0 - SQL Injection

CVE-2008-0770—webappsphp

SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Comments 0.5.8.5g - SQL Injection

CVE-2008-0773—webappsphp

SQL injection vulnerability in Phil Taylor Comments (com_comments, aka Review Script) 0.5.8.5g and earlier component for

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ITechBids 6.0 - 'item_id' SQL Injection

CVE-2008-0776—webappsphp

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass

CVE-2008-0782—webappsphp

Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via

28RIESGO

abrir ↗

Referência

CVE-2010-0711

CVE-2010-0711—

Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.11 - 'private.php' SQL Injection (1)

CVE-2008-0787—webappsphp

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component xfaq 1.2 - 'aid' SQL Injection

CVE-2008-0795—webappsphp

SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote a

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.