Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados
34.679CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.692 exploits
Referência✓ VexDay Proof
Snitz Forums 2000 3.1 SR4 - 'pop_profile.asp' SQL Injection
CVE-2007-1023—webappsasp
SQL injection vulnerability in pop_profile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke Module Emporium 2.3.0 - SQL Injection
CVE-2007-1034—webappsphp
SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke al
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation
CVE-2007-1057—locallinux
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 10
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TurboFTP Server 5.30 Build 572 - 'newline/LIST' Multiple Remote Denial of Service Vulnerabilities
CVE-2007-1075—doswindows
TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TurboFTP Server 5.30 Build 572 - 'newline/LIST' Multiple Remote Denial of Service Vulnerabilities
CVE-2007-1080—doswindows
Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via (1
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-MIP 0.1 - 'top.php?laypath' Remote File Inclusion
CVE-2007-1104—webappsphp
PHP remote file inclusion vulnerability in top.php in PHP Module Implementation (PHP-MIP) 0.1 allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Extreme phpBB 3.0.1 - 'functions.php' Remote File Inclusion
CVE-2007-1105—webappsphp
PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2007-1107
CVE-2007-1107—
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Coppermine Photo Gallery 1.3.x - Blind SQL Injection
CVE-2007-1107—webappsphp
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users
23RIESGO
abrir ↗
Referência✓ VexDay Proof
webSPELL 4.01.02 - 'topic' SQL Injection
CVE-2007-1163—webappsphp
SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Plan 9 Kernel - 'devenv.c OTRUNC/pwrite' Local Privilege Escalation
CVE-2007-1189—localplan9
Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Admin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion
CVE-2007-1219—webappsphp
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Angel Lms 7.1 - 'default.asp?id' SQL Injection
CVE-2007-1250—webappsasp
SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2021-36260
CVE-2021-36260CRITICALbajo ataque
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RIESGO
abrir ↗
Referência
CVE-2021-36260
CVE-2021-36260CRITICALbajo ataque
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RIESGO
abrir ↗
Referência✓ VexDay Proof
ProSysInfo TFTP Server TFTPDWIN 0.4.2 - 'UDP' Denial of Service
CVE-2007-1404—doswindows
tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP p
35RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP 4.4.6 - 'cpdf_open()' Local Source Code Disclosure
CVE-2007-1412—localmultiple
The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensiti
23RIESGO
abrir ↗
Referência
CVE-2009-4860
CVE-2009-4860—
SQL injection vulnerability in demo.php in Typing Pal 1.0 and earlier allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP 4.4.6 - 'snmpget()' Object id Local Buffer Overflow
CVE-2007-1413—localwindows
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably
28RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP 5.2.3 - 'snmpget()' Object id Local Buffer Overflow
CVE-2007-1413—localwindows
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably
28RIESGO
abrir ↗
Referência
CVE-2023-0600
CVE-2023-0600CRITICAL
WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi
63RIESGO
abrir ↗
Referência✓ VexDay Proof
SonicMailer Pro 3.2.3 - 'index.php' SQL Injection
CVE-2007-1425—webappsphp
SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft DNS Server - Dynamic DNS Update/Change
CVE-2007-1644—remotewindows
The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients i
35RIESGO
abrir ↗
Referência✓ VexDay Proof
0irc-client 1345 build20060823 - Denial of Service
CVE-2007-1648—doswindows
0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash) by operating an IRC se
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Philex 0.2.3 - Remote File Inclusion / File Disclosure
CVE-2007-1698—webappsphp
download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sen
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Module Flatmenu 1.07 - Remote File Inclusion
CVE-2007-1702—webappsphp
PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component RWCards 2.4.3 - SQL Injection
CVE-2007-1703—webappsphp
SQL injection vulnerability in index.php in the RWCards (com_rwcards) 2.4.3 and earlier component for Joomla! allows rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Active Trade 2 - 'catid' SQL Injection
CVE-2007-1705—webappsasp
SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência
CVE-2017-8917
CVE-2017-8917—
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RIESGO
abrir ↗
Referência
CVE-2017-7269
CVE-2017-7269CRITICALbajo ataque
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RIESGO
abrir ↗
← anteriorpágina 291 / 724siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.