Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados

35.370CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.233 exploits

Referência

CVE-2012-5342

CVE-2012-5342—

Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência

CVE-2012-1415

CVE-2012-1415—

Cross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attacker

23RIESGO

abrir ↗

Referência

CVE-2012-1203

CVE-2012-1203—

Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attacker

23RIESGO

abrir ↗

Referência

CVE-2022-3915

CVE-2022-3915CRITICAL

Dokan < 3.7.6 - Unauthenticated SQLi

48RIESGO

abrir ↗

Referência

CVE-2010-2853

CVE-2010-2853—

SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência

CVE-2010-2853

CVE-2010-2853—

SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MamboWiki 0.9.6 - Remote File Inclusion

CVE-2006-4282—webappsphp

PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com_mambowiki) 0.9.6 and earlier f

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component jooget 2.6.8 - SQL Injection

CVE-2008-0829—webappsphp

SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Modules Okul 1.0 - 'okulid' SQL Injection

CVE-2008-0881—webappsphp

SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2017-14097

CVE-2017-14097—

An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below coul

28RIESGO

abrir ↗

Referência

IOTransfer V4 - Unquoted Service Path

CVE-2022-37197HIGHlocalwindows

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.

41RIESGO

abrir ↗

Referência✓ VexDay Proof

EQdkp 1.3.2f - 'user_id' Authentication Bypass

CVE-2008-2222—webappsphp

SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Link Bid Script 1.5 - Multiple SQL Injections

CVE-2008-4175—webappsphp

Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FlashGet 1.9.0.1012 - 'FTP PWD Response' SEH Stack Overflow

CVE-2008-4321—remotewindows

Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long res

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.zip' Denial of Service

CVE-2008-4323—doswindows

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service (application cr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ScriptMagix FAQ Builder 2.0 - 'index.php' SQL Injection

CVE-2007-1618—webappsphp

SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Glossarie 1.7 - 'sid' SQL Injection

CVE-2007-2738—webappsphp

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Krazy Image Hosting 0.7a - 'display.php' SQL Injection

CVE-2006-5140—webappsphp

SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote at

23RIESGO

abrir ↗

Referência

CVE-2017-14219

CVE-2017-14219—

XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless cre

23RIESGO

abrir ↗

Referência

CVE-2022-4445

CVE-2022-4445CRITICAL

FL3R FeelBox <= 8.1 - Unauthenticated SQLi

48RIESGO

abrir ↗

Referência

CVE-2013-4953

CVE-2013-4953—

SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência

CVE-2017-14355

CVE-2017-14355—

A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Simple Shop Galore 3.x - 'catid' SQL Injection

CVE-2008-2568—webappsphp

SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component SimpleShop 3.4 - SQL Injection

CVE-2008-2568—webappsphp

SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SmartPPC Pay Per Click Script - 'idDirectory' Blind SQL Injection (1)

CVE-2008-3152—webappsphp

SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SmartPPC Pay Per Click Script - 'idDirectory' Blind SQL Injection (2)

CVE-2008-3152—webappsphp

SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary S

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Agent Zone - 'ann_id' SQL Injection

CVE-2008-3951—webappsphp

SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

CVE-2008-4335—webappsphp

SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting / SQL Injection

CVE-2008-4335—webappsphp

SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi CMS 4.2.4/4.2.5/4.3.0 - Multiple SQL Injections

CVE-2008-4778—webappsphp

SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.