Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.596exploits catalogados

36.656CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.212GitHub PoC 15.164VulnCheck XDB 8.883Nuclei 4.369Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

IBM Rational ClearQuest - Web Authentication Bypass / SQL Injection

CVE-2007-4368—webappscgi

SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Basic 6.0 - VBP_Open OLE Local CodeExec

CVE-2007-4776—localwindows

Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to ex

50RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Basic Enterprise 6.0 SP6 - Code Execution

CVE-2007-4776—localwindows

Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to ex

50RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual FoxPro 6.0 - FPOLE.OCX 6.0.8450.0 Remote (PoC)

CVE-2007-4790—doswindows

Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the

35RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft SQL Server - Distributed Management Objects Buffer Overflow

CVE-2007-4814—remotewindows

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.200

35RISCO

abrir ↗

Referência✓ VexDay Proof

Vantage Linguistics AnswerWorks 4 - API ActiveX Control Buffer Overflow

CVE-2007-6387—remotewindows

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Van

35RISCO

abrir ↗

Referência✓ VexDay Proof

WebED 0.8999a - Multiple Remote File Inclusions

CVE-2007-4815—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers

35RISCO

abrir ↗

Referência✓ VexDay Proof

BaoFeng2 - 'mps.dll' ActiveX Multiple Remote Buffer Overflows (PoC)

CVE-2007-4816—doswindows

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown imp

23RISCO

abrir ↗

Referência✓ VexDay Proof

X-Cart - Multiple Remote File Inclusions

CVE-2007-4907—webappsphp

Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

JetCast Server 2.0.0.4308 - Remote Denial of Service

CVE-2007-4911—doswindows

JSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service (daemon crash) via a lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component joom12pic 1.0 - Remote File Inclusion

CVE-2007-4954—webappsphp

PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla

28RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP 1.0 - 'login.php' SQL Injection

CVE-2007-4956—webappsphp

Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Chupix CMS 0.2.3 - 'download.php' Remote File Disclosure

CVE-2007-4957—webappsphp

Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overw

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xforum 1.4 - 'topic' SQL Injection

CVE-2008-0279—webappsphp

SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

DomPHP 0.81 - Remote Add Administrator

CVE-2008-0282—webappsphp

SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Foojan Wms 1.0 - 'story' SQL Injection

CVE-2008-0447—webappsphp

SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easysitenetwork Recipe - 'categoryId' SQL Injection

CVE-2008-0453—webappsphp

SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Liquid-Silver CMS 0.1 - 'update' Local File Inclusion

CVE-2008-0459—webappsphp

Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActiveKB KnowledgeBase 2.x - 'catId' SQL Injection

CVE-2007-5131—webappsphp

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhFiTo 1.3.0 - 'SRC_PATH' Remote File Inclusion

CVE-2007-5157—webappsphp

PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser (PhFiTo) 1.3.0 in phpFido

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Links 1.3 - 'id' SQL Injection

CVE-2008-0565—webappsphp

SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_downloads - SQL Injection

CVE-2008-0652—webappsphp

SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

FaceBook PhotoUploader - 'ImageUploader4.ocx 4.5.57.0' Remote Buffer Overflow

CVE-2008-0660—remotewindows

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0,

35RISCO

abrir ↗

Referência✓ VexDay Proof

The Everything Development System Pre-1.0 - SQL Injection

CVE-2008-0675—webappsphp

SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pr

23RISCO

abrir ↗

Referência✓ VexDay Proof

ImageStation - 'SonyISUpload.cab 1.0.0.38' ActiveX Buffer Overflow (PoC)

CVE-2008-0748—doswindows

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyIS

28RISCO

abrir ↗

Referência✓ VexDay Proof

1024 CMS 1.4.2 - Local File Inclusion / Blind SQL Injection

CVE-2008-1911—webappsphp

SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magic_quotes_gpc is disabled

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi Pro 6.25 Poll - 'poll_id' SQL Injection

CVE-2008-2036—webappsphp

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Smeego 1.0 - 'Cookie lang' Local File Inclusion

CVE-2008-2352—webappsphp

Directory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Archangel Weblog 0.90.02 - 'post_id' SQL Injection

CVE-2008-2356—webappsphp

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flatnuke 3 - Remote Cookie Manipulation / Privilege Escalation

CVE-2007-5771—webappsphp

Flatnuke 3 (aka FlatnuX) allows remote attackers to obtain administrative access via a myforum%00 cookie.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.