Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.057exploits catalogados
36.288CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8843Nuclei 4358Metasploit 3489✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
Docebo 3.0.3 - Multiple Remote File Inclusions
CVE-2006-2576—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WholeHogSoftware Ware Support - Authentication Bypass
CVE-2009-0458—webappsphp
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MoviePlay 4.76 - '.lst' Local Buffer Overflow
CVE-2007-0016—localwindows
Stack-based buffer overflow in MoviePlay 4.76 allows remote attackers to execute arbitrary code via a long filename in a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Advanced Login 0.7 - 'root' Remote File Inclusion
CVE-2007-1766—webappsphp
PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows remo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TCExam 4.0.011 - 'SessionUserLang' Shell Injection
CVE-2007-2431—webappsphp
Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote at
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Madirish Webmail 2.0 - 'addressbook.php' Remote File Inclusion
CVE-2007-2826—webappsphp
PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP JOBWEBSITE PRO - 'JobSearch3.php' SQL Injection
CVE-2008-2914—webappsphp
SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WholeHogSoftware Password Protect - Authentication Bypass
CVE-2009-0459—webappsphp
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remot
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mx Module Smartor Album FAP 2.0 RC 1 - Remote File Inclusion
CVE-2007-2189—webappsphp
PHP remote file inclusion vulnerability in admin/admin_album_otf.php in the MX Smartor Full Album Pack (FAP) 2.0 RC1 mod
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FlashBB 1.1.8 - 'sendmsg.php' Remote File Inclusion
CVE-2007-3697—webappsphp
PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to exe
28RIESGO
abrir ↗
Referência✓ VexDay Proof
WholeHogSoftware Password Protect - Insecure Cookie Handling
CVE-2009-0461—webappsphp
Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative acce
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ClickCart 6.0 - Authentication Bypass
CVE-2009-0462—webappsphp
Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PayProCart 1146078425 - Multiple Remote File Inclusions
CVE-2006-4672—webappsphp
PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
E-Smart Cart - 'productsofcat.asp' SQL Injection
CVE-2008-2917—webappsasp
SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência✓ VexDay Proof
QK SMTP 3.01 - 'RCPT TO' Remote Denial of Service
CVE-2006-5551—doswindows
Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a lon
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBLASTER CMS 1.0 RC1 - Multiple Local File Inclusions
CVE-2008-5171—webappsphp
Multiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when register_globals
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Ultimate PHP Board 2.0 - 'header_simple.php' File Inclusion
CVE-2006-7169—webappsphp
PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
KVIrc 3.4.2 Shiny - URI handler Remote Command Execution
CVE-2008-7070—remotewindows
Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
groone's Guestbook 2.0 - Remote File Inclusion
CVE-2009-0464—webappsphp
PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Axiom Photo/News Gallery 0.8.6 - Remote File Inclusion
CVE-2007-0200—webappsphp
PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6 a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
GLLCTS2 - 'sort' Blind SQL Injection
CVE-2008-2919—webappsphp
SQL injection vulnerability in listing.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery / Cross-Site Scripting
CVE-2009-0468—remotewindows
Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AgerMenu 0.01 - 'top.inc.php?rootdir' Remote File Inclusion
CVE-2007-0837—webappsphp
PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Euphonics Audio Player 1.0 - '.pls' Local Buffer Overflow
CVE-2009-0476—localwindows
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi
50RIESGO
abrir ↗
Referência✓ VexDay Proof
Extcalendar 2 - 'profile.php' Remote User Pass Change
CVE-2007-0681—webappsphp
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without prov
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Euphonics Audio Player 1.0 - '.pls' Universal Local Buffer Overflow
CVE-2009-0476—localwindows
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi
50RIESGO
abrir ↗
Referência✓ VexDay Proof
study planner (studiewijzer) 0.15 - Remote File Inclusion
CVE-2007-1628—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier, when register_globa
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NUNE News Script 2.0pre2 - Multiple Remote File Inclusions
CVE-2007-0143—webappsphp
Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
minb 0.1.0 - Remote Code Execution
CVE-2008-7005—webappsphp
include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eFiction 3.1.1 - 'path_to_smf' Remote File Inclusion
CVE-2007-1118—webappsphp
Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbit
23RIESGO
abrir ↗
← anteriorpágina 68 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.