Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.697exploits catalogados

36.715CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.264GitHub PoC 15.172VulnCheck XDB 8.920Nuclei 4.373Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Admin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion

CVE-2007-1219—webappsphp

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetProxy 4.03 - Web Filter Evasion / Bypass Logging

CVE-2007-1225—remotewindows

The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in

23RISCO

abrir ↗

Referência✓ VexDay Proof

STWC-Counter 3.4.0 - 'downloadcounter.php' Remote File Inclusion

CVE-2007-1233—webappsphp

PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Connectix Boards 0.7 - 'p_skin' Multiple Vulnerabilities

CVE-2007-1255—webappsphp

Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticat

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebMod 0.48 - Content-Length Remote Buffer Overflow

CVE-2007-1260—remotewindows

Stack-based buffer overflow in the connectHandle function in server.cpp in WebMod 0.48 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

SonicMailer Pro 3.2.3 - 'index.php' SQL Injection

CVE-2007-1425—webappsphp

SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

AssetMan 2.4a - 'download_pdf.php' Remote File Disclosure

CVE-2007-1427—webappsphp

Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

creative Guestbook 1.0 - Multiple Vulnerabilities

CVE-2007-1480—webappsphp

Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php

23RISCO

abrir ↗

Referência✓ VexDay Proof

wbblog - Cross-Site Scripting / SQL Injection

CVE-2007-1481—webappsphp

SQL injection vulnerability in index.php in WBBlog allows remote attackers to execute arbitrary SQL commands via the e_i

23RISCO

abrir ↗

Referência✓ VexDay Proof

wbblog - Cross-Site Scripting / SQL Injection

CVE-2007-1482—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in WBBlog allows remote attackers to inject arbitrary web script o

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebLog - 'index.php' Remote File Disclosure

CVE-2007-1487—webappsphp

Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Avant Browser 11.0 build 26 - Remote Stack Overflow Crash

CVE-2007-1501—doswindows

Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service (crash)

23RISCO

abrir ↗

Referência✓ VexDay Proof

ApowerManager 3.1.7 - Phone Manager Remote Denial of Service (PoC)

CVE-2019-9601—dosandroid

The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many si

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Link Engine - 'default.asp?catid' SQL Injection

CVE-2007-1630—webappsasp

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClassWeb 2.0.3 - 'BASE' Remote File Inclusion

CVE-2007-1640—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

PortailPhp 2.0 - 'idnews' SQL Injection

CVE-2007-1641—webappsphp

SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active NewsLetter 4.3 - 'ViewNewspapers.asp' SQL Injection

CVE-2007-1696—webappsasp

SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Philex 0.2.3 - Remote File Inclusion / File Disclosure

CVE-2007-1698—webappsphp

download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sen

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module Flatmenu 1.07 - Remote File Inclusion

CVE-2007-1702—webappsphp

PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component RWCards 2.4.3 - SQL Injection

CVE-2007-1703—webappsphp

SQL injection vulnerability in index.php in the RWCards (com_rwcards) 2.4.3 and earlier component for Joomla! allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Trade 2 - 'catid' SQL Injection

CVE-2007-1705—webappsasp

SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

eWebquiz 8 - 'eWebQuiz.asp' SQL Injection

CVE-2007-1706—webappsasp

SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

ttCMS 4 - 'ez_sql.php?lib_path' Remote File Inclusion

CVE-2007-1708—webappsphp

PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Corel WordPerfect X3 13.0.0.565 - '.prs' Local Buffer Overflow

CVE-2007-1735—localwindows

Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution

CVE-2007-1998—webappsphp

Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

gtcatalog 0.9.1 - 'index.php' Remote File Inclusion

CVE-2006-5923—webappsphp

PHP remote file inclusion vulnerability in index.php in Chris Mac gtcatalog (aka GimeScripts Shopping Catalog) 0.9.1 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scorp Book 1.0 - 'smilies.php?config' Remote File Inclusion

CVE-2007-1937—webappsphp

PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Rha7 Downloads 1.0 - 'visit.php' SQL Injection

CVE-2007-1960—webappsphp

SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.3 - Remote Code Execution

CVE-2007-1963—webappsphp

SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module WF-Section 1.01 - 'articleId' SQL Injection

CVE-2007-1974—webappsphp

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.