Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.449exploits catalogados

35.552CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientes populares riesgo

22.367 exploits

Referência✓ VexDay Proof

Liquid-Silver CMS 0.1 - 'update' Local File Inclusion

CVE-2008-0459—webappsphp

Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, allo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_downloads - SQL Injection

CVE-2008-0652—webappsphp

SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

FaceBook PhotoUploader - 'ImageUploader4.ocx 4.5.57.0' Remote Buffer Overflow

CVE-2008-0660—remotewindows

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0,

35RIESGO

abrir ↗

Referência✓ VexDay Proof

The Everything Development System Pre-1.0 - SQL Injection

CVE-2008-0675—webappsphp

SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_Marketplace 1.1.1 - SQL Injection

CVE-2008-0689—webappsphp

SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla!

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BookmarkX script 2007 - 'topicid' SQL Injection

CVE-2008-0695—webappsphp

SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL comma

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mihalism Multi Host Download - 'Username' Blind SQL Injection

CVE-2008-0714—webappsphp

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Sermon 0.2 - 'gid' SQL Injection

CVE-2008-0721—webappsphp

SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to e

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ImageStation - 'SonyISUpload.cab 1.0.0.38' ActiveX Buffer Overflow (PoC)

CVE-2008-0748—doswindows

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyIS

28RIESGO

abrir ↗

Referência✓ VexDay Proof

ImageStation - 'SonyISUpload.cab' 1.0.0.38 ActiveX Buffer Overflow

CVE-2008-0748—remotewindows

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyIS

28RIESGO

abrir ↗

Referência✓ VexDay Proof

ibProArcade 3.3.0 - SQL Injection

CVE-2008-0770—webappsphp

SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência

CVE-2008-0722

CVE-2008-0722—

Cross-site scripting (XSS) vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web

23RIESGO

abrir ↗

Referência

CVE-2008-0729

CVE-2008-0729—

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion an

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Comments 0.5.8.5g - SQL Injection

CVE-2008-0773—webappsphp

SQL injection vulnerability in Phil Taylor Comments (com_comments, aka Review Script) 0.5.8.5g and earlier component for

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ITechBids 6.0 - 'item_id' SQL Injection

CVE-2008-0776—webappsphp

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass

CVE-2008-0782—webappsphp

Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via

28RIESGO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.11 - 'private.php' SQL Injection (1)

CVE-2008-0787—webappsphp

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component xfaq 1.2 - 'aid' SQL Injection

CVE-2008-0795—webappsphp

SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

nuBoard 0.5 - 'ssid' SQL Injection

CVE-2008-0796—webappsphp

SQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Quiz 0.81 - 'tid' SQL Injection

CVE-2008-0799—webappsphp

SQL injection vulnerability in index.php in the Quiz (com_quiz) 0.81 and earlier component for Mambo and Joomla! allows

23RIESGO

abrir ↗

Referência

CVE-2026-19384

CVE-2026-19384MEDIUM

SourceCodester Simple Doctors Appointment System ajax.php set_appointment sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

OSSIM 0.9.9rc5 - Cross-Site Scripting / SQL Injection

CVE-2008-0920—webappsphp

SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Now SMS/Mms Gateway 5.5 - Remote Buffer Overflow

CVE-2008-0871—remotewindows

Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute ar

50RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Classifieds - 'cid' SQL Injection

CVE-2008-0873—webappsphp

SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Modules Okul 1.0 - 'okulid' SQL Injection

CVE-2008-0881—webappsphp

SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Globsy 1.0 - 'file' Remote File Disclosure

CVE-2008-0905—webappsphp

Directory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module Docum - 'artid' SQL Injection

CVE-2008-0906—webappsphp

SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module Inhalt - 'cid' SQL Injection

CVE-2008-0907—webappsphp

SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MultiCart 2.0 - 'productdetails.php' SQL Injection

CVE-2008-0911—webappsphp

SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute

23RIESGO

abrir ↗

Referência

CVE-2024-57708

CVE-2024-57708MEDIUM

An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.