Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

Envolution 1.1.0 - 'topic' SQL Injection

CVE-2007-4253—webappsphp

SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

YNP Portal System 2.2.0 - 'showpage.cgi p' Remote File Disclosure

CVE-2007-4256—webappscgi

Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary f

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.ply' Local Buffer Overflow

CVE-2007-4257—localwindows

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.spr' Local Buffer Overflow

CVE-2007-4257—localwindows

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Pub Site Directory - 'Directory.php?cat' SQL Injection

CVE-2007-4258—webappsphp

SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - SQL Injection

CVE-2007-4312—webappsphp

SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft DXMedia SDK 6 - 'SourceUrl' ActiveX Remote Code Execution

CVE-2007-4336—remotewindows

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX cont

35RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Webring Website Script - 'category.php?cat' SQL Injection

CVE-2007-4362—webappsphp

SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access 7.0 Upload Module - 'inotes6.dll' Remote Buffer Overflow

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access Upload Module - 'dwa7w.dll' Remote Buffer Overflow

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access Upload Module - Overwrite (SEH)

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Classifieds PLUS - 'id' SQL Injection

CVE-2007-5122—webappsphp

SQL injection vulnerability in store_info.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Novus 1.0 - 'notas.asp?nota_id' SQL Injection

CVE-2007-5123—webappsasp

SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActiveKB KnowledgeBase 2.x - 'catId' SQL Injection

CVE-2007-5131—webappsphp

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

SyntaxCMS 1.3 - 'FCKeditor' Arbitrary File Upload

CVE-2007-5156—webappsphp

Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.

23RISCO

abrir ↗

Referência✓ VexDay Proof

actSite 1.56 - 'news.php' Local File Inclusion

CVE-2007-5174—webappsphp

Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

smbftpd 0.96 - SMBDirList-function Remote Format String

CVE-2007-5184—remotelinux

Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute a

28RISCO

abrir ↗

Referência✓ VexDay Proof

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service

CVE-2007-5219—doswindows

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLA

28RISCO

abrir ↗

Referência

CVE-2007-5225

CVE-2007-5225—

Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the co

23RISCO

abrir ↗

Referência

CVE-2010-0372

CVE-2010-0372—

SQL injection vulnerability in the Articlemanager (com_articlemanager) component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak

CVE-2007-5225—localsolaris

Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5230—webappsphp

admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5231—webappsphp

Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticate

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Template Management System 1.3 - SQL Injection

CVE-2007-5233—webappsphp

SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ossigeno CMS 2.2a3 - 'footer.php' Remote File Inclusion

CVE-2007-5234—webappsphp

PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers t

35RISCO

abrir ↗

Referência✓ VexDay Proof

FSFDT v3.000 d9 - 'HELP' Remote Buffer Overflow

CVE-2007-5256—remotewindows

Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote

23RISCO

abrir ↗

Referência

CVE-2010-0373

CVE-2010-0373—

SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Trionic Cite CMS 1.2rev9 - Remote File Inclusion

CVE-2007-5271—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to ex

28RISCO

abrir ↗

Referência✓ VexDay Proof

Furkan Tastan Blog - SQL Injection

CVE-2007-5272—webappsasp

SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5278—webappsphp

Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control,

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.