Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.057exploits catalogados

36.288CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8843Nuclei 4358Metasploit 3489✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

CoolPlayer Portable 2.19.1 - '.m3u' Local Stack Overflow (PoC)

CVE-2009-1437—doswindows

Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows rem

28RIESGO

abrir ↗

Referência✓ VexDay Proof

CoolPlayer Portable 2.19.1 - '.m3u' Local Buffer Overflow (1)

CVE-2009-1437—localwindows

Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows rem

28RIESGO

abrir ↗

Referência✓ VexDay Proof

WebPortal CMS 0.8b - Multiple Local/Remote File Inclusions

CVE-2009-1445—webappsphp

Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary file

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SMA-DB 0.3.13 - Multiple Remote File Inclusions

CVE-2009-1452—webappsphp

Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Tiny Blogr 1.0.0 rc4 - Authentication Bypass

CVE-2009-1453—webappsphp

SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Pragyan CMS 2.6.4 - Multiple SQL Injections

CVE-2009-1480—webappsphp

SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Flatchat 3.0 - 'pmscript.php' Local File Inclusion

CVE-2009-1486—webappsphp

Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitra

23RIESGO

abrir ↗

Referência✓ VexDay Proof

fungamez rc1 - Authentication Bypass / Local File Inclusion

CVE-2009-1488—webappsphp

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbit

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Invision Power Board 2.0.3 - 'login.php' SQL Injection

CVE-2005-1598—webappsphp

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Merlix Teamworx Server - File Disclosure/Bypass

CVE-2008-5599—webappsphp

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Kusaba 1.0.4 - Remote Code Execution (1)

CVE-2008-5663—webappsphp

Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execut

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Cmimarketplace - 'viewit' Directory Traversal

CVE-2009-1496—webappsphp

Directory traversal vulnerability in the Cmi Marketplace (com_cmimarketplace) component 0.1 for Joomla! allows remote at

38RIESGO

abrir ↗

Referência✓ VexDay Proof

GOM Player 2.1.16.6134 - Subtitle Local Buffer Overflow (PoC)

CVE-2009-1497—doswindows

Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

S-CMS 1.1 Stable - 'page' Local File Inclusion

CVE-2009-1502—webappsphp

Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and exe

23RIESGO

abrir ↗

Referência✓ VexDay Proof

eLitius 1.0 - 'banner-details.php?id' SQL Injection

CVE-2009-1506—webappsphp

SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Referência✓ VexDay Proof

X-Forum 0.6.2 - Remote Command Execution

CVE-2009-1508—webappsphp

SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Grabit 1.7.2 Beta 3 - '.nzb' Local Buffer Overflow (SEH)

CVE-2009-1586—localwindows

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to ex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow (PoC)

CVE-2009-1592—doswindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow

CVE-2009-1592—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Job Script 2.0 - Arbitrary Change Admin Password

CVE-2009-1610—webappsphp

admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator passwo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_lowcosthotels - Blind SQL Injection

CVE-2008-5875—webappsphp

SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joo

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities

CVE-2008-5877—webappsphp

Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc

23RIESGO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'CWD Response' Remote Buffer Overflow

CVE-2009-1611—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'CWD Response' Universal Overwrite (SEH)

CVE-2009-1611—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

VMware Inc 6.0.0 - CreateProcess Remote Code Execution

CVE-2007-4155—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attac

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Soritong MP3 Player 1.0 - Local Buffer Overflow (SEH)

CVE-2009-1643—localwindows

Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Sorinara Streaming Audio Player 0.9 - '.pla' Local Stack Overflow (PoC)

CVE-2009-1644—doswindows

Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Sorinara Streaming Audio Player 0.9 - '.pla' Local Stack Overflow

CVE-2009-1644—localwindows

Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mini-stream RM-MP3 Converter 3.0.0.7 - '.asx' Local Buffer Overflow

CVE-2009-1645—localwindows

Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Mini-stream RM-MP3 Converter 3.0.0.7 - '.RAM' Local Buffer Overflow

CVE-2009-1645—localwindows

Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arb

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.