Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.596exploits catalogados

36.656CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.212GitHub PoC 15.164VulnCheck XDB 8.883Nuclei 4.369Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

DESlock+ < 3.2.6 - 'LIST' Local Kernel Memory Leak

CVE-2008-1141—localwindows

Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kerne

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pheap 2.0 - Authentication Bypass / Remote Code Execution

CVE-2007-2985—webappsphp

Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZYXEL ZyWALL Quagga/Zebra - 'Default Password' Remote Code Execution

CVE-2008-1160—remotehardware

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a u

28RISCO

abrir ↗

Referência✓ VexDay Proof

phpComasy 0.8 - 'mod_project_id' SQL Injection

CVE-2008-1164—webappsphp

SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Affiliate Market 0.1 Beta - Cross-Site Scripting / SQL Injection

CVE-2008-1177—webappsphp

SQL injection vulnerability in shop/detail.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebSPELL 4.01.02 - 'picture.php' File Disclosure

CVE-2007-2369—webappsphp

Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before 4.3.0 is used, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyNewsletter 0.8 (beta5) - Multiple Vulnerabilities

CVE-2007-2371—webappsphp

admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modification

23RISCO

abrir ↗

Referência✓ VexDay Proof

Internet Download Accelerator 5.2 - Remote Buffer Overflow (PoC)

CVE-2007-3162—doswindows

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Ac

23RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component - Unsafe Method

CVE-2007-3168—remotewindows

A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions befo

23RISCO

abrir ↗

Referência✓ VexDay Proof

dagger Web engine 23jan2007 - Remote File Inclusion

CVE-2007-3431—webappsphp

PHP remote file inclusion vulnerability in cal.func.php in Valerio Capello Dagger - The Cutting Edge r23jan2007 allows r

45RISCO

abrir ↗

Referência✓ VexDay Proof

Pharmacy System 2.0 - 'index.php?ID' SQL Injection

CVE-2007-3433—webappsphp

SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Overflow

CVE-2007-3435—remotewindows

Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) Bar

50RISCO

abrir ↗

Referência✓ VexDay Proof

Ripe Website Manager (CMS) 0.8.9 - Remote File Inclusion

CVE-2007-3524—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to e

35RISCO

abrir ↗

Referência✓ VexDay Proof

Buddy Zone 1.5 - Multiple SQL Injections

CVE-2007-3526—webappsphp

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebChat 0.78 - 'login.php?rid' SQL Injection

CVE-2007-3534—webappsphp

SQL injection vulnerability in login.php in WebChat 0.78 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickTicket 1.2 - 'qti_checkname.php' Local File Inclusion

CVE-2007-3547—webappsphp

Directory traversal vulnerability in qti_checkname.php in QuickTicket 1.2 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Buddy Zone 1.5 - 'view_sub_cat.php?cat_id' SQL Injection

CVE-2007-3549—webappsphp

SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS 2.0.13.2 - 'xoopsOption[nocommon]' Remote Command Execution

CVE-2006-2516—webappsphp

mainfile.php in XOOPS 2.0.13.2 and earlier, when register_globals is enabled, allows remote attackers to overwrite varia

23RISCO

abrir ↗

Referência✓ VexDay Proof

workbench 0.11 - 'header.php?path' Remote File Inclusion

CVE-2007-2542—webappsphp

PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Flashgames Module 1.0.1 - SQL Injection

CVE-2007-2543—webappsphp

SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Friendly 1.0d1 - 'friendly_path' Remote File Inclusion

CVE-2007-2569—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wikivi5 - 'show.php?sous_rep' Remote File Inclusion

CVE-2007-2570—webappsphp

PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module wfquotes 1.0 - SQL Injection

CVE-2007-2571—webappsphp

SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

NoAh 0.9 pre 1.2 - 'mfa_theme.php' Remote File Inclusion

CVE-2007-2572—webappsphp

PHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka PHP Content Architect,

23RISCO

abrir ↗

Referência✓ VexDay Proof

BitchX 1.1-final - 'EXEC' Remote Command Execution

CVE-2007-3360—remotelinux

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data cont

23RISCO

abrir ↗

Referência✓ VexDay Proof

SonicWALL SSL-VPN - 'NeLaunchCtrl' ActiveX Control Remote Command Execution

CVE-2007-5603—remotewindows

Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x

50RISCO

abrir ↗

Referência✓ VexDay Proof

Sony CONNECT Player 4.x - '.m3u' Local Stack Overflow

CVE-2007-5709—localwindows

Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code

28RISCO

abrir ↗

Referência✓ VexDay Proof

ProfileCMS 1.0 - Arbitrary File Upload

CVE-2007-5720—webappsphp

Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jakarta Slide 2.1 RC1 - Remote File Disclosure

CVE-2007-5731—remotemultiple

Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.GIF' Image Denial of Service

CVE-2007-3958—doswindows

Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certa

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.