Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

Ol BookMarks Manager 0.7.4 - 'root' Remote File Inclusion

CVE-2007-2816—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PHP

28RISCO

abrir ↗

Referência

CVE-2007-2821

CVE-2007-2821—

SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.01 - Authentication Bypass

CVE-2007-2822—webappsphp

TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

LeadTools Raster Variant - 'LTRVR14e.dll' Remote File Overwrite

CVE-2007-2851—remotewindows

A certain ActiveX control in LeadTools Raster Variant Object Library (LTRVR14e.dll) 14.5.0.44 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual CD 9.0.0.2 - 'vc9api.DLL' Remote Shell Commands Execution

CVE-2007-2853—remotewindows

The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module XT-Conteudo - 'spaw_root' Remote File Inclusion

CVE-2007-3221—webappsphp

PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows

35RISCO

abrir ↗

Referência✓ VexDay Proof

PHP::HTML 0.6.4 - 'PHPhtml.php' Remote File Inclusion

CVE-2007-3230—webappsphp

PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute

35RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime Forum 1.0 - 'low.php?topic' SQL Injection

CVE-2007-3235—webappsphp

Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

LiveCMS 3.4 - 'categoria.php?cid' SQL Injection

CVE-2007-3292—webappsphp

Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

LAN Management System (LMS) 1.9.6 - Remote File Inclusion

CVE-2007-3325—webappsphp

PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remo

35RISCO

abrir ↗

Referência✓ VexDay Proof

BitchX 1.1-final - 'EXEC' Remote Command Execution

CVE-2007-3360—remotelinux

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data cont

23RISCO

abrir ↗

Referência✓ VexDay Proof

NCTAudioEditor2 ActiveX DLL 'NCTWMAFile2.dll 2.6.2.157' - File Write

CVE-2007-3400—remotewindows

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.

23RISCO

abrir ↗

Referência✓ VexDay Proof

b1gbb 2.24.0 - 'footer.inc.php?tfooter' Remote File Inclusion

CVE-2007-3401—webappsphp

PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary

45RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3426—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3427—webappsphp

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pharmacy System 2.0 - 'index.php?ID' SQL Injection

CVE-2007-3433—webappsphp

SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Overflow

CVE-2007-3435—remotewindows

Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) Bar

50RISCO

abrir ↗

Referência✓ VexDay Proof

bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting

CVE-2007-3448—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in BugMall Shopping Cart 2.5 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

6ALBlog - 'newsid' SQL Injection

CVE-2007-3449—webappsphp

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the n

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sony Network Camera SNC-P5 1.0 - ActiveX viewer Heap Overflow (PoC)

CVE-2007-3488—doswindows

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Excel 2000/2003 - Sheet Name (PoC)

CVE-2007-3490—doswindows

Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified

35RISCO

abrir ↗

Referência✓ VexDay Proof

Ripe Website Manager (CMS) 0.8.9 - Remote File Inclusion

CVE-2007-3524—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to e

35RISCO

abrir ↗

Referência✓ VexDay Proof

QuickTicket 1.2 - 'qti_checkname.php' Local File Inclusion

CVE-2007-3547—webappsphp

Directory traversal vulnerability in qti_checkname.php in QuickTicket 1.2 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Buddy Zone 1.5 - 'view_sub_cat.php?cat_id' SQL Injection

CVE-2007-3549—webappsphp

SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

SuperCali PHP Event Calendar 0.4.0 - SQL Injection

CVE-2007-3582—webappsphp

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

b1gbb 2.24.0 - SQL Injection / Cross-Site Scripting

CVE-2007-3589—webappsphp

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP Module jeuxflash 1.0 - 'id' SQL Injection

CVE-2007-4922—webappsphp

SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Joomlaradio 5.0 - Remote File Inclusion

CVE-2007-4923—webappsphp

PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component f

35RISCO

abrir ↗

Referência✓ VexDay Proof

phpFFL 1.24 - 'PHPFFL_FILE_ROOT' Remote File Inclusion

CVE-2007-4934—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code v

28RISCO

abrir ↗

Referência✓ VexDay Proof

Omnistar Article Manager Software - 'article.php' SQL Injection

CVE-2007-4952—webappsphp

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.