Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.533exploits catalogados
35.607CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.367 exploits
Referência✓ VexDay Proof
Youtuber Clone - SQL Injection
CVE-2008-3419—webappsphp
SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mobius 1.4.4.1 - SQL Injection
CVE-2008-3420—webappsphp
Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LetterIt 2 - 'Language' Local File Inclusion
CVE-2008-3446—webappsphp
Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Plogger 3.0 - SQL Injection
CVE-2008-3563—webappsphp
Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ABG Blocking Script 1.0a - 'abg_path' Remote File Inclusion
CVE-2008-3570—webappsphp
PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
k-links directory - SQL Injection / Cross-Site Scripting
CVE-2008-3580—webappsphp
Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1)
23RIESGO
abrir ↗
Referência✓ VexDay Proof
k-links directory - SQL Injection / Cross-Site Scripting
CVE-2008-3581—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component EZ Store Remote - Blind SQL Injection
CVE-2008-3586—webappsphp
SQL injection vulnerability in the EZ Store (com_ezstore) component for Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2018-5977
CVE-2018-5977—
SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price_type=range&price= r
23RIESGO
abrir ↗
Referência
CVE-2026-6324
CVE-2026-6324MEDIUM
Libsoup: libsoup: http request smuggling via unsigned to signed conversion error
33RIESGO
abrir ↗
Referência✓ VexDay Proof
phsBlog 0.1.1 - Multiple SQL Injections
CVE-2008-3588—webappsphp
Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Referência
CVE-2026-9606
CVE-2026-9606MEDIUM
itsourcecode Courier Management System manage_user.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9605
CVE-2026-9605MEDIUM
GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Symphony 1.7.01 (non-patched) - Remote Code Execution
CVE-2008-3592—webappsphp
Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OpenImpro 1.1 - 'image.php' SQL Injection
CVE-2008-3599—webappsphp
SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2018-5980
CVE-2018-5980—
SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Quicksilver Forums 1.4.1 - SQL Injection
CVE-2008-3601—webappsphp
SQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vacation Rental Script 3.0 - 'id' SQL Injection
CVE-2008-3603—webappsphp
SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2018-5983
CVE-2018-5983—
SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AWStats Totals 1.14 - 'AWStatstotals.php' Remote Code Execution
CVE-2008-3922—webappsphp
awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences
50RIESGO
abrir ↗
Referência✓ VexDay Proof
CMME 1.12 - Local File Inclusion / Cross-Site Scripting / Cross-Site Request Forgery/Download Backup/Make Directory
CVE-2008-3923—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow
23RIESGO
abrir ↗
Referência
CVE-2018-5984
CVE-2018-5984—
SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH_INFO to the categor
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CMME 1.12 - Local File Inclusion / Cross-Site Scripting / Cross-Site Request Forgery/Download Backup/Make Directory
CVE-2008-3925—webappsphp
Cross-site request forgery (CSRF) vulnerability in admin.php in Content Management Made Easy (CMME) 1.12 allows remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CMME 1.12 - Local File Inclusion / Cross-Site Scripting / Cross-Site Request Forgery/Download Backup/Make Directory
CVE-2008-3926—webappsphp
Multiple directory traversal vulnerabilities in Content Management Made Easy (CMME) 1.12 allow remote attackers to (1) r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Words tag script 1.2 - 'word' SQL Injection
CVE-2008-3945—webappsphp
SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EsFaq 2.0 - 'idcat' SQL Injection
CVE-2008-3952—webappsphp
SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Vastal I-Tech Shaadi Zone 1.0.9 - 'tage' SQL Injection
CVE-2008-3953—webappsphp
SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Windows - SmbRelay3 NTLM Replay (MS08-068)
CVE-2008-4037—remotewindows
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 20
50RIESGO
abrir ↗
Referência✓ VexDay Proof
AJ HYIP ACME - 'comment.php' SQL Injection
CVE-2008-4043—webappsphp
Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Friendly Technologies - Read/Write Registry/Read Files
CVE-2008-4050—remotewindows
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remot
23RIESGO
abrir ↗
← anteriorpágina 499 / 746siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.