Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados

35.370CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.233 exploits

Referência

CVE-2022-43138

CVE-2022-43138CRITICAL

Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.

48RIESGO

abrir ↗

Referência

CVE-2020-12882

CVE-2020-12882—

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a

23RIESGO

abrir ↗

Referência

CVE-2014-8728

CVE-2014-8728—

SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System a

23RIESGO

abrir ↗

Referência

CVE-2014-100012

CVE-2014-100012—

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Flashgames Module 1.0.1 - SQL Injection

CVE-2007-2543—webappsphp

SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arbi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Girlserv ads 1.5 - 'details_news.php' SQL Injection

CVE-2007-3583—webappsphp

SQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbit

23RIESGO

abrir ↗

Referência

CVE-2010-2656

CVE-2010-2656—

The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Vanilla 1.1.3 - Blind SQL Injection

CVE-2007-5643—webappsphp

Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Adult Script 1.6.5 - Multiple SQL Injections

CVE-2007-6576—webappsphp

Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JoomRadio 1.0 - 'id' SQL Injection

CVE-2008-2633—webappsphp

Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

webEdition CMS - 'we_objectID' Blind SQL Injection

CVE-2008-4154—webappsphp

SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CustomCMS 4.0 - 'print.php' SQL Injection

CVE-2008-4156—webappsphp

SQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when magic_quotes_gpc is disabled, allow

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MatPo Link 1.2b - Blind SQL Injection / Cross-Site Scripting

CVE-2008-6607—webappsphp

Cross-site scripting (XSS) vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to inject arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

microTopic 1 - 'Rating' Blind SQL Injection

CVE-2009-1661—webappsphp

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc is disabled, allows remote attacker

23RIESGO

abrir ↗

Referência

CVE-2005-4416

CVE-2005-4416—

SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th

23RIESGO

abrir ↗

Referência

CVE-2014-2043

CVE-2014-2043—

SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows re

23RIESGO

abrir ↗

Referência

CVE-2020-26629

CVE-2020-26629CRITICAL

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows

48RIESGO

abrir ↗

Referência

CVE-2016-0846

CVE-2016-0846—

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Forum - 'cat' SQL Injection

CVE-2008-3954—webappsphp

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute ar

23RIESGO

abrir ↗

Referência

CVE-2017-11909

CVE-2017-11909—

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

35RIESGO

abrir ↗

Referência

CVE-2017-11911

CVE-2017-11911—

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

35RIESGO

abrir ↗

Referência

CVE-2017-11918

CVE-2017-11918—

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to

35RIESGO

abrir ↗

Referência

CVE-2010-4844

CVE-2010-4844—

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência

CVE-2010-4844

CVE-2010-4844—

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência

CVE-2010-2676

CVE-2010-2676—

Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers

23RIESGO

abrir ↗

Referência

CVE-2010-2676

CVE-2010-2676—

Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers

23RIESGO

abrir ↗

Referência

CVE-2017-12542

CVE-2017-12542—

A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53

60RIESGO

abrir ↗

Referência✓ VexDay Proof

SAPID Gallery 1.0 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4065—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.WMF' CreateBrushIndirect Denial of Service

CVE-2006-4071—doswindows

Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP,

28RIESGO

abrir ↗

Referência

CVE-2008-0429

CVE-2008-0429—

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execut

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.