Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados
39.383CVEs con explotación pública
24.695probados en laboratorio
3523 exploits
Metasploit300
RealPlayer ierpplug.dll ActiveX Control Playlist Name Buffer Overflow
CVE-2007-5601—18 oct 2007
Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and e
50RIESGO
abrir ↗
Metasploit300
Oracle DB SQL Injection via SYS.LT.FINDRICSET Evil Cursor Method
CVE-2007-5511—17 oct 2007
SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.
50RIESGO
abrir ↗
Metasploit600
TikiWiki tiki-graph_formula Remote PHP Code Execution
CVE-2007-5423—10 oct 2007
tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f ar
60RIESGO
abrir ↗
Metasploit300
Electronic Arts SnoopyCtrl ActiveX Control Buffer Overflow
CVE-2007-4466—08 oct 2007
Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attac
50RIESGO
abrir ↗
Metasploit600
HPLIP hpssd.py From Address Arbitrary Command Execution
CVE-2007-5208—04 oct 2007
hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent a
50RIESGO
abrir ↗
Metasploit400
Borland InterBase open_marker_file() Buffer Overflow
CVE-2007-5244—03 oct 2007
Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versio
50RIESGO
abrir ↗
Metasploit400
Borland InterBase PWD_db_aliased() Buffer Overflow
CVE-2007-5243—03 oct 2007
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗
Metasploit400
Borland InterBase jrd8_create_database() Buffer Overflow
CVE-2007-5243—03 oct 2007
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗
Metasploit400
Borland InterBase INET_connect() Buffer Overflow
CVE-2007-5243—03 oct 2007
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗
Metasploit200
Firebird Relational Database isc_create_database() Buffer Overflow
CVE-2007-5243—03 oct 2007
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗
Metasploit300
Kazaa Altnet Download Manager ActiveX Control Buffer Overflow
CVE-2007-5217—03 oct 2007
Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) K
43RIESGO
abrir ↗
Metasploit200
Firebird Relational Database SVC_attach() Buffer Overflow
CVE-2007-5243—03 oct 2007
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗
Metasploit200
Firebird Relational Database isc_attach_database() Buffer Overflow
CVE-2007-5243—03 oct 2007
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗
Metasploit400
Borland InterBase SVC_attach() Buffer Overflow
CVE-2007-5243—03 oct 2007
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗
Metasploit400
Borland InterBase isc_create_database() Buffer Overflow
CVE-2007-5243—03 oct 2007
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗
Metasploit400
Borland InterBase isc_attach_database() Buffer Overflow
CVE-2007-5243—03 oct 2007
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗
Metasploit500
CA BrightStor HSM Buffer Overflow
CVE-2007-5082—27 sep 2007
Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r
50RIESGO
abrir ↗
Metasploit200
Xitami 2.5c2 Web Server If-Modified-Since Overflow
CVE-2007-5067—24 sep 2007
Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long
60RIESGO
abrir ↗
Metasploit400
IBM Tivoli Storage Manager Express CAD Service Buffer Overflow
CVE-2007-4880—24 sep 2007
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1
60RIESGO
abrir ↗
Metasploit300
Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow
CVE-2007-5107—24 sep 2007
Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media
50RIESGO
abrir ↗
Metasploit300
Intersil (Boa) HTTPd Basic Authentication Password Reset
CVE-2007-4915—10 sep 2007
The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent st
50RIESGO
abrir ↗
Metasploit0
Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary Command Execution
CVE-2007-3010CRITICALbajo ataque09 sep 2007
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows rem
100RIESGO
abrir ↗
Metasploit400
Microsoft Visual Basic VBP Stack Buffer Overflow
CVE-2007-4776—04 sep 2007
Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to ex
50RIESGO
abrir ↗
Metasploit300
Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow
CVE-2007-4515—30 ago 2007
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo!
50RIESGO
abrir ↗
Metasploit600
ClamAV Milter Blackhole-Mode Remote Code Execution
CVE-2007-4560—24 ago 2007
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary command
60RIESGO
abrir ↗
Metasploit500
Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow
CVE-2007-4440—18 ago 2007
Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, all
50RIESGO
abrir ↗
Metasploit300
2Wire Cross-Site Request Forgery Password Reset Vulnerability
CVE-2007-4387—15 ago 2007
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.
18RIESGO
abrir ↗
Metasploit500
EFS Easy Chat Server Authentication Request Handling Buffer Overflow
CVE-2004-2466—14 ago 2007
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username
60RIESGO
abrir ↗
Metasploit200
HP OpenView Operations OVTrace Buffer Overflow
CVE-2007-3872—09 ago 2007
Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 f
50RIESGO
abrir ↗
Metasploit200
Windows RSH Daemon Buffer Overflow
CVE-2007-4006—24 jul 2007
Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-000000
50RIESGO
abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.