Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.900exploits catalogados

35.840CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientes populares riesgo

22.600 exploits

Referência

CVE-2017-6970

CVE-2017-6970—

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privil

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Phaos R4000 Version - 'file' Remote File Disclosure

CVE-2008-1755—webappsphp

Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote att

23RIESGO

abrir ↗

Referência

CVE-2018-20448

CVE-2018-20448—

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Sabros.us 1.75 - 'thumbnails.php' Remote File Disclosure

CVE-2008-1799—webappsphp

Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files vi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2342—webappsphp

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files

23RIESGO

abrir ↗

Referência

CVE-2020-10596

CVE-2020-10596—

OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upl

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ComVironment 4.0 - 'grab_globals.lib.php' Remote File Inclusion

CVE-2007-0395—webappsphp

PHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0 allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BbZL.php 0.92 - 'lien_2' Local Directory Traversal

CVE-2008-4707—webappsphp

Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthorized directori

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SG Real Estate Portal 2.0 - Blind SQL Injection / Local File Inclusion

CVE-2008-6010—webappsphp

Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Minigal b13 - Remote File Disclosure

CVE-2008-6933—webappsphp

Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code

23RIESGO

abrir ↗

Referência✓ VexDay Proof

VS-Link-Partner 2.1 - 'script_pfad' Remote File Inclusion

CVE-2007-1025—webappsphp

PHP remote file inclusion vulnerability in inc/functions_inc.php in VS-Link-Partner 2.1 and earlier allows remote attack

23RIESGO

abrir ↗

Referência✓ VexDay Proof

WebKalk2 1.9.0 - 'absolute_path' Remote File Inclusion

CVE-2007-2307—webappsphp

PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote attackers to execute ar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Simple Forum 3.2 - File Disclosure / Cross-Site Scripting

CVE-2008-0542—webappsphp

Directory traversal vulnerability in thumbnail.php in Gerd Tentler Simple Forum 3.2 allows remote attackers to read arbi

23RIESGO

abrir ↗

Referência

CVE-2014-9236

CVE-2014-9236—

Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier al

23RIESGO

abrir ↗

Referência

CVE-2018-12897

CVE-2018-12897—

SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow.

23RIESGO

abrir ↗

Referência

CVE-2009-4806

CVE-2009-4806—

admin/save_user.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which

23RIESGO

abrir ↗

Referência

CVE-2019-0881

CVE-2019-0881—

An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows

23RIESGO

abrir ↗

Referência

CVE-2026-5534

CVE-2026-5534MEDIUM

itsourcecode Online Enrollment System Parameter index.php sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Oxygen 2.0 - 'repquote' SQL Injection

CVE-2008-2816—webappsphp

SQL injection vulnerability in post.php in Oxygen (aka O2PHP Bulletin Board) 2.0 allows remote attackers to execute arbi

23RIESGO

abrir ↗

Referência

CVE-2016-6851

CVE-2016-6851—

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX G

23RIESGO

abrir ↗

Referência

CVE-2013-2594

CVE-2013-2594—

SQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through 3.4.14 allows remote at

23RIESGO

abrir ↗

Referência

CVE-2026-5533

CVE-2026-5533MEDIUM

badlogic pi-mono SVG Artifact SvgArtifact.ts cross site scripting

33RIESGO

abrir ↗

Referência✓ VexDay Proof

SlimCMS 1.0.0 - 'redirect.php' Privilege Escalation

CVE-2008-5708—webappsphp

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative us

23RIESGO

abrir ↗

Referência

CVE-2016-4108

CVE-2016-4108—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RIESGO

abrir ↗

Referência✓ VexDay Proof

RPortal 1.1 - 'file_op' Remote File Inclusion

CVE-2008-6099—webappsphp

PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbit

23RIESGO

abrir ↗

Referência

CVE-2015-2995

CVE-2015-2995—

The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote at

50RIESGO

abrir ↗

Referência

CVE-2012-6526

CVE-2012-6526—

SQL injection vulnerability in show_code.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BASE 1.2.4 - melissa Snort Frontend Remote File Inclusion

CVE-2006-2685—webappsphp

PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_gl

50RIESGO

abrir ↗

Referência✓ VexDay Proof

CCleague Pro 1.0.1RC1 - 'cookie' Remote Code Execution

CVE-2006-4721—webappsphp

Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and

23RIESGO

abrir ↗

Referência✓ VexDay Proof

GL-SH Deaf Forum 6.4.4 - Local File Inclusion

CVE-2007-3535—webappsphp

Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.