Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.107exploits catalogados
36.322CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3490✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
CJG EXPLORER PRO 3.2 - 'g_pcltar_lib_dir' Remote File Inclusion
CVE-2007-2660—webappsphp
PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Telephone Directory 2008 - SQL Injection / Cross-Site Scripting
CVE-2008-2678—webappsphp
Multiple SQL injection vulnerabilities in Telephone Directory 2008, when magic_quotes_gpc is disabled, allow remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
realm CMS 2.3 - Multiple Vulnerabilities
CVE-2008-2679—webappsphp
SQL injection vulnerability in the KeyWordsList function in _includes/inc_routines.asp in Realm CMS 2.3 and earlier allo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BandSite CMS 1.1.4 - Insecure Cookie Handling
CVE-2008-5497—webappsphp
BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login_
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SyntaxCMS 1.3 - '0004_init_urls.php' Remote File Inclusion
CVE-2006-5055—webappsphp
PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1.1.1 through 1.3 allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Miniweb 0.8.19 - Multiple Vulnerabilities
CVE-2008-0338—remotewindows
Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Siteman 1.1.9 - 'cat' Remote File Disclosure
CVE-2008-0452—webappsphp
Directory traversal vulnerability in articles.php in Siteman 1.1.9 allows remote attackers to read arbitrary files via d
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Black Ice Software Inc Barcode SDK - 'BIDIB.ocx' Multiple Vulnerabilities
CVE-2008-2683—remotewindows
The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to for
50RIESGO
abrir ↗
Referência✓ VexDay Proof
Aj Classifieds - Authentication Bypass
CVE-2008-7041—webappsphp
AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ilchClan 1.05g - 'tid' SQL Injection
CVE-2006-0851—webappsphp
SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Web Slider 0.6 - Insecure Cookie/Authentication Handling
CVE-2008-2298—webappsphp
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
txtSQL 2.2 Final - 'startup.php' Remote File Inclusion
CVE-2008-3595—webappsphp
PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Site-Assistant 0990 - 'paths[version]' Remote File Inclusion
CVE-2007-0867—webappsphp
PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PhpBlock a8.5 - Multiple Remote File Inclusions
CVE-2008-5210—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CyBoards PHP Lite 1.21 - 'script_path' Remote File Inclusion
CVE-2007-1983—webappsphp
PHP remote file inclusion vulnerability in include/default_header.php in Cyboards PHP Lite 1.21 allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Sisplet CMS 05.10 - 'site_path' Remote File Inclusion
CVE-2007-2347—webappsphp
PHP remote file inclusion vulnerability in main/forum/komentar.php in OneClick CMS (aka Sisplet CMS) 05.10 and earlier a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
6ALBlog - 'newsid' SQL Injection
CVE-2007-3451—webappsphp
PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS 2.0.18 - Local File Inclusion / URL Redirecting
CVE-2008-0612—webappsphp
Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AGENCY4NET WEBFTP 1 - 'download2.php' File Disclosure
CVE-2008-0091—webappsphp
Directory traversal vulnerability in download2.php in AGENCY4NET WEBFTP 1 allows remote attackers to read and delete arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo
CVE-2008-3205—webappsphp
Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BbZL.php 0.92 - Insecure Cookie Handling
CVE-2008-4708—webappsphp
BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_admi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
sCssBoard (Multiple Versions) - 'pwnpack' Remote s
CVE-2008-5576—webappsphp
admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain adminis
23RIESGO
abrir ↗
Referência✓ VexDay Proof
asp-project 1.0 - Insecure Cookie Method
CVE-2009-0280—webappsasp
Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting th
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PAD Site Scripts 3.6 - Insecure Cookie Handling
CVE-2009-1739—webappsphp
PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including admi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CzarNews 1.14 - 'tpath' Remote File Inclusion
CVE-2006-3685—webappsphp
PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
mutiple timesheets 5.0 - Multiple Vulnerabilities
CVE-2008-1415—webappsphp
Directory traversal vulnerability in index.php in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpQuiz 0.1.2 - SQL Injection / Code Execution
CVE-2006-4979—webappsphp
Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpinv 0.8.0 - Local File Inclusion / Cross-Site Scripting
CVE-2008-2694—webappsphp
Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Referência✓ VexDay Proof
netForo! 0.1 - 'down.php?file_to_download' Remote File Disclosure
CVE-2007-1392—webappsphp
Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Velocity Web-Server 1.0 - Directory Traversal
CVE-2008-7084—remotewindows
Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers t
23RIESGO
abrir ↗
← anteriorpágina 79 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.