Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.894exploits catalogados

35.202CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 22.103GitHub PoC 14.055VulnCheck XDB 8571Nuclei 4250Metasploit 3472✓ solo verificadosrecientes populares riesgo

21.899 exploits

Referência✓ VexDay Proof

webSPELL 4.01.02 - 'topic' SQL Injection

CVE-2007-1163—webappsphp

SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Plan 9 Kernel - 'devenv.c OTRUNC/pwrite' Local Privilege Escalation

CVE-2007-1189—localplan9

Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Admin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion

CVE-2007-1219—webappsphp

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Angel Lms 7.1 - 'default.asp?id' SQL Injection

CVE-2007-1250—webappsasp

SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers

23RIESGO

abrir ↗

Referência

CVE-2021-36260

CVE-2021-36260CRITICALbajo ataque

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RIESGO

abrir ↗

Referência

CVE-2021-36260

CVE-2021-36260CRITICALbajo ataque

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RIESGO

abrir ↗

Referência✓ VexDay Proof

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - 'UDP' Denial of Service

CVE-2007-1404—doswindows

tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP p

35RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP 4.4.6 - 'cpdf_open()' Local Source Code Disclosure

CVE-2007-1412—localmultiple

The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensiti

23RIESGO

abrir ↗

Referência

CVE-2009-4860

CVE-2009-4860—

SQL injection vulnerability in demo.php in Typing Pal 1.0 and earlier allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP 4.4.6 - 'snmpget()' Object id Local Buffer Overflow

CVE-2007-1413—localwindows

Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably

28RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.3 - 'snmpget()' Object id Local Buffer Overflow

CVE-2007-1413—localwindows

Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably

28RIESGO

abrir ↗

Referência

CVE-2023-0600

CVE-2023-0600CRITICAL

WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi

63RIESGO

abrir ↗

Referência✓ VexDay Proof

SonicMailer Pro 3.2.3 - 'index.php' SQL Injection

CVE-2007-1425—webappsphp

SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow

CVE-2007-1709—localwindows

Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows contex

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection

CVE-2007-1712—webappsasp

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

C-Arbre 0.6PR7 - 'ROOT_PATH' Remote File Inclusion

CVE-2007-1721—webappsphp

Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbit

28RIESGO

abrir ↗

Referência✓ VexDay Proof

NaviCOPA Web Server 2.01 - Remote Buffer Overflow (Metasploit)

CVE-2007-1733—remotewindows

Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (

28RIESGO

abrir ↗

Referência

CVE-2009-4876

CVE-2009-4876—

admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the ci

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Corel WordPerfect X3 13.0.0.565 - '.prs' Local Buffer Overflow

CVE-2007-1735—localwindows

Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Softerra Time-Assistant 6.2 - 'inc_dir' Remote File Inclusion

CVE-2007-1787—webappsphp

Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Kaqoo Auction - 'install_root' Multiple Remote File Inclusions

CVE-2007-1790—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to exec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Picture-Engine 1.2.0 - 'wall.php?cat' SQL Injection

CVE-2007-1791—webappsphp

SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module RM+Soft Gallery 1.0 - Blind SQL Injection

CVE-2007-1806—webappsphp

SQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for Xoops allows remote attacke

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Kshop 1.17 - 'id' SQL Injection

CVE-2007-1810—webappsphp

SQL injection vulnerability in product_details.php in the Kshop 1.17 and earlier module for Xoops allows remote attacker

23RIESGO

abrir ↗

Referência

CVE-2009-4883

CVE-2009-4883—

SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Tiny Event 1.01 - 'id' SQL Injection

CVE-2007-1811—webappsphp

SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module for Xoops allows remote a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BT-sondage 1.12 - 'gestion_sondage.php' Remote File Inclusion

CVE-2007-1812—webappsphp

PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module eCal 2.24 - 'display.php' SQL Injection

CVE-2007-1813—webappsphp

SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to exec

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Core - 'viewcat.php' SQL Injection

CVE-2007-1814—webappsphp

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Library - 'viewcat.php' SQL Injection

CVE-2007-1815—webappsphp

SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.