Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

FAQEngine 4.16.03 - 'question.php?questionref' SQL Injection

CVE-2007-2749—webappsphp

SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPGlossar 0.8 - 'format_menue' Remote File Inclusion

CVE-2007-2751—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor Backup 11.5.2.0 - 'caloggderd.exe' Denial of Service

CVE-2007-2772—doswindows

(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 all

28RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Denial of Service

CVE-2007-2772—doswindows

(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 all

28RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Live Support 1.21 - Admin Credential Retrieve

CVE-2007-2775—webappsphp

AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are m

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Template Seller Pro 3.25 - Remote Code Execution

CVE-2007-2777—webappsphp

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Libstats 1.0.3 - 'template_csv.php' Remote File Inclusion

CVE-2007-2779—webappsphp

PHP remote file inclusion vulnerability in template_csv.php in Libstats 1.0.3 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

LeadTools Thumbnail Browser Control - 'lttmb14E.ocx' Remote Buffer Overflow

CVE-2007-2787—remotewindows

Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in Lea

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ol BookMarks Manager 0.7.4 - 'root' Remote File Inclusion

CVE-2007-2816—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PHP

28RISCO

abrir ↗

Referência

CVE-2007-2821

CVE-2007-2821—

SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.01 - Authentication Bypass

CVE-2007-2822—webappsphp

TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

LeadTools Raster Variant - 'LTRVR14e.dll' Remote File Overwrite

CVE-2007-2851—remotewindows

A certain ActiveX control in LeadTools Raster Variant Object Library (LTRVR14e.dll) 14.5.0.44 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual CD 9.0.0.2 - 'vc9api.DLL' Remote Shell Commands Execution

CVE-2007-2853—remotewindows

The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

JBlog 1.0 - Create / Delete Admin Authentication Bypass

CVE-2007-3973—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script o

23RISCO

abrir ↗

Referência✓ VexDay Proof

bwired - 'index.php?newsID' SQL Injection

CVE-2007-3976—webappsphp

SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the new

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 4.4.7/5.2.3 - MySQL/MySQLi 'Safe_Mode' Bypass

CVE-2007-3997—localmultiple

The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.3 - 'PHP_gd2.dll' imagepsloadfont Local Buffer Overflow (PoC)

CVE-2007-4033—doswindows

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent at

28RISCO

abrir ↗

Referência

CVE-2010-0249

CVE-2010-0249HIGHsob ataque

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and S

100RISCO

abrir ↗

Referência✓ VexDay Proof

Adult Directory - 'cat_id' SQL Injection

CVE-2007-4056—webappsphp

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPNews 0.93 - 'format_menue' Remote File Inclusion

CVE-2007-4232—webappsphp

PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote att

35RISCO

abrir ↗

Referência✓ VexDay Proof

CHILKAT ASP String - 'CkString.dll 1.1 SaveToFile()' Insecure Method

CVE-2007-4252—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String

23RISCO

abrir ↗

Referência✓ VexDay Proof

Envolution 1.1.0 - 'topic' SQL Injection

CVE-2007-4253—webappsphp

SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

YNP Portal System 2.2.0 - 'showpage.cgi p' Remote File Disclosure

CVE-2007-4256—webappscgi

Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary f

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.ply' Local Buffer Overflow

CVE-2007-4257—localwindows

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.spr' Local Buffer Overflow

CVE-2007-4257—localwindows

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Pub Site Directory - 'Directory.php?cat' SQL Injection

CVE-2007-4258—webappsphp

SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - SQL Injection

CVE-2007-4312—webappsphp

SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft DXMedia SDK 6 - 'SourceUrl' ActiveX Remote Code Execution

CVE-2007-4336—remotewindows

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX cont

35RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Webring Website Script - 'category.php?cat' SQL Injection

CVE-2007-4362—webappsphp

SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access 7.0 Upload Module - 'inotes6.dll' Remote Buffer Overflow

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.