Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.647exploits catalogados
34.986CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8571Nuclei 4248Metasploit 3472✓ solo verificadosrecientespopularesriesgo
21.899 exploits
Referência✓ VexDay Proof
PHPortal 1.0 - Insecure Cookie Handling
CVE-2009-2117—webappsphp
uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by sett
23RIESGO
abrir ↗
Referência
CVE-2010-1043
CVE-2010-1043—
Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary lo
23RIESGO
abrir ↗
Referência
CVE-2009-4957
CVE-2009-4957—
Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary file
23RIESGO
abrir ↗
Referência
CVE-2009-4683
CVE-2009-4683—
Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-3822
CVE-2009-3822—
PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows rem
23RIESGO
abrir ↗
Referência
CVE-2018-8908
CVE-2018-8908—
An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CS
23RIESGO
abrir ↗
Referência
CVE-2019-3501
CVE-2019-3501—
The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards pag
23RIESGO
abrir ↗
Referência
CVE-2010-2336
CVE-2010-2336—
index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the
23RIESGO
abrir ↗
Referência
CVE-2010-2920
CVE-2010-2920—
Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allow
38RIESGO
abrir ↗
Referência
CVE-2010-3742
CVE-2010-3742—
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attac
23RIESGO
abrir ↗
Referência
CVE-2014-3434
CVE-2014-3434—
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,
23RIESGO
abrir ↗
Referência
CVE-2014-3434
CVE-2014-3434—
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,
23RIESGO
abrir ↗
Referência
CVE-2012-0932
CVE-2012-0932—
Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to injec
23RIESGO
abrir ↗
Referência
CVE-2012-10038
CVE-2012-10038CRITICAL
Auxilium RateMyPet Arbitrary File Upload RCE
63RIESGO
abrir ↗
Referência✓ VexDay Proof
creative Guestbook 1.0 - Multiple Vulnerabilities
CVE-2007-1480—webappsphp
Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mini File Host 1.2 - 'language' Local File Inclusion
CVE-2008-0357—webappsphp
Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote at
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Kmita Tellfriend 2.0 - 'file' Remote File Inclusion
CVE-2008-2198—webappsphp
PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when regi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
cmreams CMS 1.3.1.1 beta2 - Local File Inclusion / Cross-Site Scripting
CVE-2008-2984—webappsphp
Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass
CVE-2008-4613—webappsasp
SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eSHOP100 - 'SUB' SQL Injection
CVE-2008-5190—webappsphp
SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebMaster Marketplace - SQL Injection
CVE-2008-5574—webappsphp
SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OpenX 2.6 - 'bannerid' Blind SQL Injection
CVE-2008-6163—webappsphp
SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections
CVE-2008-6608—webappsphp
Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2010-1925
CVE-2010-1925—
SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2009-4220
CVE-2009-4220—
PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote
23RIESGO
abrir ↗
Referência
CVE-2009-4220
CVE-2009-4220—
PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote
23RIESGO
abrir ↗
Referência
CVE-2010-1928
CVE-2010-1928—
Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled,
23RIESGO
abrir ↗
Referência
CVE-2009-4553
CVE-2009-4553—
Stack-based buffer overflow in iRehearse allows remote attackers to cause a denial of service (application crash) or pos
23RIESGO
abrir ↗
Referência
CVE-2014-9344
CVE-2014-9344—
Cross-site request forgery (CSRF) vulnerability in Snowfox CMS before 1.0.10 allows remote attackers to hijack the authe
23RIESGO
abrir ↗
Referência
CVE-2023-33148
CVE-2023-33148HIGH
Microsoft Office Elevation of Privilege Vulnerability
41RIESGO
abrir ↗
← anteriorpágina 382 / 730siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.