Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados
35.370CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.233 exploits
Referência✓ VexDay Proof
AV Arcade 2.1b - 'index.php?id' SQL Injection
CVE-2007-3563—webappsphp
SQL injection vulnerability in includes/view_page.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Affiliate Market 0.1 Beta - Cross-Site Scripting / SQL Injection
CVE-2008-1176—webappsphp
Cross-site scripting (XSS) vulnerability in function/sideblock.php in Affiliate Market (affmarket) 0.1 BETA allows remot
23RIESGO
abrir ↗
Referência
CVE-2016-10156
CVE-2016-10156—
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd tim
23RIESGO
abrir ↗
Referência✓ VexDay Proof
HomePH Design 2.10 RC2 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
CVE-2008-2980—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2016-4578
CVE-2016-4578—
sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local us
23RIESGO
abrir ↗
Referência
CVE-2017-11882
CVE-2017-11882HIGHbajo ataqueransomware
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RIESGO
abrir ↗
Referência✓ VexDay Proof
MyNewsGroups 0.6b - 'myng_root' Remote Inclusion
CVE-2006-3966—webappsphp
PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsG
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Technote 7 - 'shop_this_skin_path' Remote File Inclusion
CVE-2008-4138—webappsphp
PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows r
28RIESGO
abrir ↗
Referência✓ VexDay Proof
MemHT Portal 3.9.0 - Remote Create Shell
CVE-2008-4457—webappsphp
SQL injection vulnerability in inc/inc_statistics.php in MemHT Portal 3.9.0 and earlier, when magic_quotes_gpc is disabl
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Click&Rank - SQL Injection / Cross-Site Scripting
CVE-2008-5889—webappsasp
Cross-site scripting (XSS) vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AJ Auction Pro Platinum - 'seller_id' SQL Injection
CVE-2008-6004—webappsphp
Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RTWebalbum 1.0.462 - 'albumID' Blind SQL Injection
CVE-2009-1910—webappsphp
SQL injection vulnerability in index.php in RTWebalbum 1.0.462 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
elvin bts 1.2.0 - Multiple Vulnerabilities
CVE-2009-2127—webappsphp
Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2016-9151
CVE-2016-9151—
Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0
23RIESGO
abrir ↗
Referência
CVE-2016-9151
CVE-2016-9151—
Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0
23RIESGO
abrir ↗
Referência
CVE-2008-2633
CVE-2008-2633—
Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attac
23RIESGO
abrir ↗
Referência
CVE-2010-4406
CVE-2010-4406—
Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic_quotes_gpc is disabled,
23RIESGO
abrir ↗
Referência
CVE-2015-4685
CVE-2015-4685—
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain p
23RIESGO
abrir ↗
Referência
CVE-2015-4685
CVE-2015-4685—
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain p
23RIESGO
abrir ↗
Referência
CVE-2022-43138
CVE-2022-43138CRITICAL
Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.
48RIESGO
abrir ↗
Referência
CVE-2020-12882
CVE-2020-12882—
Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a
23RIESGO
abrir ↗
Referência
CVE-2014-8728
CVE-2014-8728—
SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System a
23RIESGO
abrir ↗
Referência
CVE-2014-100012
CVE-2014-100012—
SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Flashgames Module 1.0.1 - SQL Injection
CVE-2007-2543—webappsphp
SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Girlserv ads 1.5 - 'details_news.php' SQL Injection
CVE-2007-3583—webappsphp
SQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2010-2656
CVE-2010-2656—
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vanilla 1.1.3 - Blind SQL Injection
CVE-2007-5643—webappsphp
Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Adult Script 1.6.5 - Multiple SQL Injections
CVE-2007-6576—webappsphp
Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component JoomRadio 1.0 - 'id' SQL Injection
CVE-2008-2633—webappsphp
Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
webEdition CMS - 'we_objectID' Blind SQL Injection
CVE-2008-4154—webappsphp
SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
← anteriorpágina 412 / 742siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.