Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.107exploits catalogados
36.322CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3490✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
A-shop 0.70 - Remote File Deletion
Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote
23RIESGO
abrir ↗Referência✓ VexDay Proof
KwsPHP 1.0 mg2 Module - SQL Injection
SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗Referência✓ VexDay Proof
Adobe Reader - 'util.printf()' JavaScript Function Stack Overflow (1)
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary c
100RIESGO
abrir ↗Referência✓ VexDay Proof
AuraCMS 1.62 - 'stat.php' Remote Code Execution
stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into
23RIESGO
abrir ↗Referência✓ VexDay Proof
Thyme 1.3 - 'export_to' Local File Inclusion
Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, allows remo
23RIESGO
abrir ↗Referência✓ VexDay Proof
Submitter Script - Authentication Bypass
Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitr
23RIESGO
abrir ↗Referência✓ VexDay Proof
Minerva 2.0.8a Build 237 - 'phpbb_root_path' File Inclusion
PHP remote file inclusion vulnerability in stat_modules/users_age/module.php in Minerva 2.0.8a Build 237 and earlier all
23RIESGO
abrir ↗Referência✓ VexDay Proof
Adobe Reader - 'util.printf()' JavaScript Function Stack Overflow (2)
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary c
100RIESGO
abrir ↗Referência✓ VexDay Proof
Libra PHP File Manager 1.18/2.0 - Local File Inclusion
fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass auth
23RIESGO
abrir ↗Referência✓ VexDay Proof
PHP-Update 2.7 - '/admin/uploads.php' Remote Code Execution
admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights[7] para
23RIESGO
abrir ↗Referência✓ VexDay Proof
Joomla! Component module autostand 1.0 - Remote File Inclusion
PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to e
23RIESGO
abrir ↗Referência✓ VexDay Proof
Blakord Portal Beta 1.3.A (All Modules) - SQL Injection
Multiple SQL injection vulnerabilities in Blakord Portal 1.3.A Beta and earlier allow remote attackers to execute arbitr
23RIESGO
abrir ↗Referência✓ VexDay Proof
mxBB Module mx_blogs 2.0.0-beta - Remote File Inclusion
PHP remote file inclusion vulnerability in includes/functions_weblog.php in mxBB mx_blogs 2.0.0 beta allows remote attac
23RIESGO
abrir ↗Referência✓ VexDay Proof
YapBB 1.2 Beta2 - 'yapbb_session.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/yapbb_session.php in YapBB 1.2 Beta2 and earlier allows remote attack
23RIESGO
abrir ↗Referência✓ VexDay Proof
Orlando CMS 0.6 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Referência✓ VexDay Proof
MiNBank 1.5.0 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System (minba) 1.5.0 allow remote attackers to
23RIESGO
abrir ↗Referência✓ VexDay Proof
Sofi WebGui 0.6.3 PRE - 'mod_dir' Remote File Inclusion
PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows r
23RIESGO
abrir ↗Referência✓ VexDay Proof
pagetree CMS 0.0.2 Beta 0001 - Remote File Inclusion
PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows re
23RIESGO
abrir ↗Referência✓ VexDay Proof
webframe 0.76 - Multiple File Inclusions
Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary lo
23RIESGO
abrir ↗Referência✓ VexDay Proof
Potato News 1.0.0 - Local File Inclusion
Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbit
23RIESGO
abrir ↗Referência✓ VexDay Proof
SiteX 0.7.4.418 - 'THEME_FOLDER' Local File Inclusion
Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and
23RIESGO
abrir ↗Referência✓ VexDay Proof
PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload
PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@pe
23RIESGO
abrir ↗Referência✓ VexDay Proof
KubeLance 1.6.4 - 'ipn.php' Local File Inclusion
Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute
23RIESGO
abrir ↗Referência✓ VexDay Proof
phpinv 0.8.0 - Local File Inclusion / Cross-Site Scripting
Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
FireAnt 1.3 - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary l
23RIESGO
abrir ↗Referência✓ VexDay Proof
LanSuite 3.3.2 - 'design' Local File Inclusion
Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrar
23RIESGO
abrir ↗Referência✓ VexDay Proof
Globsy 1.0 - Remote File Rewriting
globsy_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename
23RIESGO
abrir ↗Referência✓ VexDay Proof
Scriptsez Mini Hosting Panel - 'members.php' Local File Inclusion
Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitra
23RIESGO
abrir ↗Referência✓ VexDay Proof
Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection
Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and exec
23RIESGO
abrir ↗Referência✓ VexDay Proof
Joomla! Component live chat - SQL Injection / Open Proxy
Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.