Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.620exploits catalogados
35.647CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8693Nuclei 4299Metasploit 3474✓ solo verificadosrecientespopularesriesgo
22.407 exploits
Referência✓ VexDay Proof
XOOPS Module Core - 'viewcat.php' SQL Injection
CVE-2007-1814—webappsphp
SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2023-3845
CVE-2023-3845LOW
mooSocial mooDating URL ajax_invite cross site scripting
43RIESGO
abrir ↗
Referência✓ VexDay Proof
MindDezign Photo Gallery 2.2 - Arbitrary Add Admin
CVE-2008-6789—webappsphp
SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PumpKIN TFTP Server 2.7.2.0 - Denial of Service (Metasploit)
CVE-2008-6791—doswindows
PumpKIN TFTP Server 2.7.2.0 allows remote attackers to cause a denial of service via a write request with a long mode fi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Library - 'viewcat.php' SQL Injection
CVE-2007-1815—webappsphp
SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2023-3847
CVE-2023-3847LOW
mooSocial mooDating URL users cross site scripting
43RIESGO
abrir ↗
Referência✓ VexDay Proof
Vibro-School-CMS - 'nID' SQL Injection
CVE-2008-6795—webappsphp
SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2023-3849
CVE-2023-3849LOW
mooSocial mooDating URL find-a-match cross site scripting
43RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre Real Estate Listings - Authentication Bypass
CVE-2008-6796—webappsphp
SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to exe
23RIESGO
abrir ↗
Referência
CVE-2023-39115
CVE-2023-39115—
install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG docum
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pre Real Estate Listings - Arbitrary File Upload
CVE-2008-6798—webappsphp
Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Tribiq CMS 5.0.9a (Beta) - Insecure Cookie Handling
CVE-2008-6804—webappsphp
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the CO
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Tutoriais - 'viewcat.php' SQL Injection
CVE-2007-1816—webappsphp
SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
7Shop 1.1 - Arbitrary File Upload
CVE-2008-6806—webappsphp
Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2021-34523
CVE-2021-34523CRITICALbajo ataqueransomware
Microsoft Exchange Server Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
Referência✓ VexDay Proof
SFS EZ Link Directory - 'cat_id' SQL Injection
CVE-2008-6808—webappsphp
SQL injection vulnerability in links.php in Scripts for Sites (SFS) EZ Link Directory allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Booking Centre 2.01 - 'HotelID' SQL Injection
CVE-2008-6809—webappsphp
SQL injection vulnerability in hotel_habitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Booking Centre 2.01 - Authentication Bypass
CVE-2008-6810—webappsphp
Multiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre Booking System for Hotels Grou
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPwebnews 0.2 MySQL Edition - 'det' SQL Injection
CVE-2008-6812—webappsphp
SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
Campcodes Online Matrimonial Website System v3.3 - Code Execution via malicious SVG file upload
CVE-2023-39115—webappsphp
install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG docum
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPwebnews 0.2 MySQL Edition - 'id_kat' SQL Injection
CVE-2008-6813—webappsphp
SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component SimpleBoard 1.0.1 - Arbitrary File Upload
CVE-2008-6814—webappsphp
Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earl
23RIESGO
abrir ↗
Referência✓ VexDay Proof
A-Link WL54AP3 / WL54AP2 - Cross-Site Request Forgery / Cross-Site Scripting
CVE-2008-6824—remotehardware
The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin acco
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component DBQuery 1.4.1.1 - Remote File Inclusion
CVE-2008-6841—webappsphp
PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query (com_
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pluck CMS 4.6.1 - 'module_pages_site.php' Local File Inclusion
CVE-2008-6842—webappsphp
Directory traversal vulnerability in data/modules/blog/module_pages_site.php in Pluck 4.6.1 allows remote attackers to i
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpGreetCards - Cross-Site Scripting / Arbitrary File Upload
CVE-2008-6848—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpGreetCards - Cross-Site Scripting / Arbitrary File Upload
CVE-2008-6849—webappsphp
Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PH
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPLD 3.3 - Blind SQL Injection
CVE-2008-6851—webappsphp
SQL injection vulnerability in page.php in PHP Link Directory (phpLD) 3.3, when register_globals is enabled and magic_qu
23RIESGO
abrir ↗
Referência
CVE-2026-7306
CVE-2026-7306MEDIUM
Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key
33RIESGO
abrir ↗
Referência
CVE-2026-7305
CVE-2026-7305MEDIUM
Xuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgery
33RIESGO
abrir ↗
← anteriorpágina 519 / 747siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.