Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.559exploits catalogados

34.978CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8542Nuclei 4243Metasploit 3472✓ solo verificadosrecientes populares riesgo

21.899 exploits

Referência✓ VexDay Proof

Smoothflash - 'cid' SQL Injection

CVE-2008-1623—webappsphp

SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Neat weblog 0.2 - 'articleId' SQL Injection

CVE-2008-1639—webappsphp

SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência

CVE-2010-0951

CVE-2010-0951—

SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection

CVE-2008-1640—webappsphp

SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Boa

23RIESGO

abrir ↗

Referência

CVE-2010-0951

CVE-2010-0951—

SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Platinum 7.6.b.5 - 'dynamic_titles.php' SQL Injection

CVE-2008-1680—webappsphp

PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenanc

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FaScript FaPhoto 1.0 - 'show.php' SQL Injection

CVE-2008-1714—webappsphp

SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attack

23RIESGO

abrir ↗

Referência

CVE-2010-0952

CVE-2010-0952—

SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.x - '/user.php' Security Code Bypass / Arbitrary Add Administrator

CVE-2008-1715—webappsphp

SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic_quotes_gpc is disabled, allows

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow

CVE-2008-1724—remotewindows

Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX cont

50RIESGO

abrir ↗

Referência

CVE-2010-0952

CVE-2010-0952—

SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Free Photo Gallery Site Script - 'path' File Disclosure

CVE-2008-1730—webappsphp

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Ph

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Blogator-script 0.95 - 'incl_page' Remote File Inclusion

CVE-2008-1760—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Blogator-script 0.95 - 'id_art' SQL Injection

CVE-2008-1763—webappsphp

SQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows remote attackers to exe

23RIESGO

abrir ↗

Referência

CVE-2010-0968

CVE-2010-0968—

SQL injection vulnerability in bannershow.php in Geekhelps ADMP 1.01 allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Dragoon 0.1 - 'root' Remote File Inclusion

CVE-2008-1773—webappsphp

PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arb

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Pligg CMS 9.9.0 - 'editlink.php' SQL Injection

CVE-2008-1774—webappsphp

SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PhpBlock a8.4 - 'PATH_TO_CODE' Remote File Inclusion

CVE-2008-1776—webappsphp

PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote att

28RIESGO

abrir ↗

Referência

CVE-2010-0973

CVE-2010-0973—

SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ChartDirector 4.1 - 'viewsource.php' File Disclosure

CVE-2008-1782—webappsphp

phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive file

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Prozilla Top 100 1.2 - Arbitrary Delete Stats

CVE-2008-1785—webappsphp

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary user

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Entertainment Directory 1.1 - SQL Injection

CVE-2008-1788—webappsphp

SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Prozilla Forum Service - 'forum' SQL Injection

CVE-2008-1789—webappsphp

SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

My Gaming Ladder 7.5 - 'ladderid' SQL Injection

CVE-2008-1791—webappsphp

SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Dragoon 0.1 - 'lng' Local File Inclusion

CVE-2008-1798—webappsphp

Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

rdesktop 1.5.0 - 'process_redirect_pdu()' BSS Overflow (PoC)

CVE-2008-1802—doslinux

Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitr

28RIESGO

abrir ↗

Referência✓ VexDay Proof

BosClassifieds 3.0 - 'index.php' SQL Injection

CVE-2008-1838—webappsphp

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPAddressBook 2.11 - 'view.php' SQL Injection

CVE-2008-1847—webappsphp

SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JoomlaXplorer 1.6.2 - Remote s

CVE-2008-1849—webappsphp

Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 an

23RIESGO

abrir ↗

Referência

CVE-2018-1121

CVE-2018-1121LOW

procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() return

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.