Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados
34.679CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.692 exploits
Referência
CVE-2017-8917
CVE-2017-8917—
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RIESGO
abrir ↗
Referência
CVE-2017-7269
CVE-2017-7269CRITICALbajo ataque
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RIESGO
abrir ↗
Referência
CVE-2025-34103
CVE-2025-34103CRITICAL
WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgi
63RIESGO
abrir ↗
Referência✓ VexDay Proof
eWebquiz 8 - 'eWebQuiz.asp' SQL Injection
CVE-2007-1706—webappsasp
SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2023-21839
CVE-2023-21839HIGHbajo ataque
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow
CVE-2007-1709—localwindows
Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows contex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection
CVE-2007-1712—webappsasp
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
C-Arbre 0.6PR7 - 'ROOT_PATH' Remote File Inclusion
CVE-2007-1721—webappsphp
Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbit
28RIESGO
abrir ↗
Referência✓ VexDay Proof
NaviCOPA Web Server 2.01 - Remote Buffer Overflow (Metasploit)
CVE-2007-1733—remotewindows
Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (
28RIESGO
abrir ↗
Referência
CVE-2009-4876
CVE-2009-4876—
admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the ci
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Corel WordPerfect X3 13.0.0.565 - '.prs' Local Buffer Overflow
CVE-2007-1735—localwindows
Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Softerra Time-Assistant 6.2 - 'inc_dir' Remote File Inclusion
CVE-2007-1787—webappsphp
Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Kaqoo Auction - 'install_root' Multiple Remote File Inclusions
CVE-2007-1790—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Picture-Engine 1.2.0 - 'wall.php?cat' SQL Injection
CVE-2007-1791—webappsphp
SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module RM+Soft Gallery 1.0 - Blind SQL Injection
CVE-2007-1806—webappsphp
SQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for Xoops allows remote attacke
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Kshop 1.17 - 'id' SQL Injection
CVE-2007-1810—webappsphp
SQL injection vulnerability in product_details.php in the Kshop 1.17 and earlier module for Xoops allows remote attacker
23RIESGO
abrir ↗
Referência
CVE-2009-4883
CVE-2009-4883—
SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Tiny Event 1.01 - 'id' SQL Injection
CVE-2007-1811—webappsphp
SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module for Xoops allows remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BT-sondage 1.12 - 'gestion_sondage.php' Remote File Inclusion
CVE-2007-1812—webappsphp
PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module eCal 2.24 - 'display.php' SQL Injection
CVE-2007-1813—webappsphp
SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Core - 'viewcat.php' SQL Injection
CVE-2007-1814—webappsphp
SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Library - 'viewcat.php' SQL Injection
CVE-2007-1815—webappsphp
SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-4889
CVE-2009-4889—
SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module Tutoriais - 'viewcat.php' SQL Injection
CVE-2007-1816—webappsphp
SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module MyAds Bug Fix 2.04jp - 'index.php' SQL Injection
CVE-2007-1846—webappsphp
SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MyBloggie 2.1.6 - Multiple SQL Injections
CVE-2007-1899—webappsphp
Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pathos CMS 0.92-2 - 'warn.php' Remote File Inclusion
CVE-2007-1907—webappsphp
PHP remote file inclusion vulnerability in warn.php in Pathos Content Management System (CMS) 0.92-2 allows remote attac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP121 Instant Messenger 2.2 - Local File Inclusion
CVE-2007-1908—webappsphp
PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2009-4906
CVE-2009-4906—
Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Word 2007 - Multiple Vulnerabilities
CVE-2007-1910—doswindows
Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application cr
28RIESGO
abrir ↗
← anteriorpágina 296 / 724siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.