Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.107exploits catalogados
36.322CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3490✓ solo verificadosrecientespopularesriesgo
5629 exploits
Referência✓ VexDay Proof
NetVIOS 2.0 - 'page.asp' SQL Injection
CVE-2006-5954—webappsasp
SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
vBulletin 3.6.4 - 'inlinemod.php?postids' SQL Injection
CVE-2007-1292—webappsphp
SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, mi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ILIAS 3.7.4 - 'ref_id' Blind SQL Injection
CVE-2008-5816—webappsphp
SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Simplog 0.9.3.1 - 'comments.php' SQL Injection
CVE-2006-5398—webappsphp
SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
jPORTAL 2 - 'mailer.php' SQL Injection
CVE-2007-5974—webappsphp
SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Command Execution
CVE-2008-4049—remotewindows
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remot
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FlexBB 0.5.5 - '/inc/start.php?_COOKIE' SQL Bypass
CVE-2006-1978—webappsphp
SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
iG Calendar 1.0 - 'user.php?id' SQL Injection
CVE-2007-0130—webappsphp
SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Okul Web Otomasyon Sistemi 4.0.1 - SQL Injection
CVE-2007-0305—webappsasp
SQL injection vulnerability in etkinlikbak.asp in Okul Web Otomasyon Sistemi 4.0.1 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FreeBSD mcweject 0.9 'Eject' - Local Buffer Overflow / Local Privilege Escalation
CVE-2007-1719—localbsd
Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wolioCMS - Authentication Bypass / SQL Injection
CVE-2007-4156—webappsphp
Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via (1) the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AdaptCMS Lite 1.3 - Blind SQL Injection
CVE-2008-4524—webappsphp
SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpDatingClub 3.7 - SQL Injection / Cross-Site Scripting Injection
CVE-2009-2178—webappsphp
Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DZCP (deV!L_z Clanportal) 1.34 - 'id' SQL Injection
CVE-2006-3347—webappsphp
SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OpenLD 1.2.2 - 'index.php?id' SQL Injection
CVE-2007-3682—webappsphp
SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
RiteCMS 2.2.1 - Authenticated Remote Code Execution
CVE-2020-23934—webappsphp
An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php
28RIESGO
abrir ↗
Referência✓ VexDay Proof
MyioSoft EasyBookMarker 4.0 - Authentication Bypass
CVE-2008-5652—webappsphp
SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DataLife Engine 4.1 - SQL Injection
CVE-2006-3221—webappsphp
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DataLife Engine 4.1 - SQL Injection
CVE-2006-3221—webappsphp
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mole Group Airline Ticket Script - SQL Injection
CVE-2008-6225—webappsphp
SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Md-Pro 1.0.8x - Topics topicid SQL Injection
CVE-2007-3938—webappsphp
SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before 20070720 allows remote attac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MailMachine Pro 2.2.4 - SQL Injection
CVE-2007-6551—webappsphp
SQL injection vulnerability in showMsg.php in MailMachine Pro 2.2.4, and other versions before 2.2.6, allows remote atta
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ProfileCMS 1.0 - 'id' SQL Injection
CVE-2007-6058—webappsphp
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Brim 2.0.0 - SQL Injection / Cross-Site Scripting
CVE-2008-4083—webappsphp
Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EasyClassifields 3.0 - 'go' SQL Injection
CVE-2008-4084—webappsphp
SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection
CVE-2007-6656—webappsphp
SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Coupon Script 4.0 - 'id' SQL Injection
CVE-2008-4090—webappsphp
SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Web Directory Script 1.5.3 - 'site' SQL Injection
CVE-2008-4091—webappsphp
SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SimpleBlog 2.3 - 'id' SQL Injection
CVE-2006-4592—webappsasp
Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Katalog Plyt Audio (pl) 1.0 - SQL Injection
CVE-2007-1612—webappsphp
SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
← anteriorpágina 95 / 188siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.