Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

AimStats 3.2 - 'process.php?update' Remote Code Execution

CVE-2007-2167—webappsphp

Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into confi

35RISCO

abrir ↗

Referência✓ VexDay Proof

Mozzers SubSystem final - 'subs.php' Remote Code Execution

CVE-2007-2169—webappsphp

Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.3 - '.wmv' Remote Denial of Service

CVE-2007-2180—doswindows

Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBInsta FM 0.1.4 - 'login.php' absolute_path Remote File Inclusion

CVE-2007-2181—webappsphp

PHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Ring Webring System 0.9 - SQL Injection

CVE-2007-2183—webappsphp

SQL injection vulnerability in index.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Post REvolution 0.7.0 RC 2 - 'dir' Remote File Inclusion

CVE-2007-2201—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection

CVE-2007-2211—webappsphp

SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kodak Image Viewer - TIF/TIFF Code Execution (MS07-055)

CVE-2007-2217—localwindows

Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote at

35RISCO

abrir ↗

Referência

CVE-2007-2222

CVE-2007-2222—

Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as use

35RISCO

abrir ↗

Referência

CVE-2024-13159

CVE-2024-13159CRITICALsob ataque

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

100RISCO

abrir ↗

Referência

CVE-2021-34527

CVE-2021-34527HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2022-0543

CVE-2022-0543CRITICALsob ataque

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific

100RISCO

abrir ↗

Referência

CVE-2021-31166

CVE-2021-31166CRITICALsob ataque

HTTP Protocol Stack Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2023-46604

CVE-2023-46604CRITICALsob ataqueransomware

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

Referência

CVE-2024-9465

CVE-2024-9465CRITICALsob ataque

Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure

100RISCO

abrir ↗

Referência

CVE-2020-16846

CVE-2020-16846CRITICALsob ataque

An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH clien

100RISCO

abrir ↗

Referência✓ VexDay Proof

Pixaria Gallery 1.x - 'class.Smarty.php' Remote File Inclusion

CVE-2007-2458—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arb

28RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin wordTube 1.43 - 'wpPATH' Remote File Inclusion

CVE-2007-2481—webappsphp

PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, wh

35RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin wp-Table 1.43 - 'inc_dir' Remote File Inclusion

CVE-2007-2483—webappsphp

Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when r

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin wp-Table 1.43 - 'inc_dir' Remote File Inclusion

CVE-2007-2484—webappsphp

PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress,

35RISCO

abrir ↗

Referência

CVE-2009-4989

CVE-2009-4989—

Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin myflash 1.00 - 'wppath' Remote File Inclusion

CVE-2007-2485—webappsphp

PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allow

35RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module v4bJournal - SQL Injection

CVE-2007-2492—webappsphp

SQL injection vulnerability in index.php in the v4bJournal module for PostNuke allows remote authenticated users to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Excel Viewer OCX 3.1.0.6 - Multiple Denial of Service Vulnerabilities

CVE-2007-2495—doswindows

Multiple stack-based buffer overflows in the ExcelOCX ActiveX control in ExcelViewer.ocx 3.1.0.6 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

1024 CMS 0.7 - 'download.php' Remote File Disclosure

CVE-2007-2507—webappsphp

Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to rea

23RISCO

abrir ↗

Referência✓ VexDay Proof

Berylium2 2003-08-18 - 'beryliumroot' Remote File Inclusion

CVE-2007-2531—webappsphp

PHP remote file inclusion vulnerability in berylium-classes.php in Berylium2 2003-08-18 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

workbench 0.11 - 'header.php?path' Remote File Inclusion

CVE-2007-2542—webappsphp

PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP TopTree BBS 2.0.1a - 'right_file' Remote File Inclusion

CVE-2007-2544—webappsphp

PHP remote file inclusion vulnerability in templates/default/tpl_message.php in PHP TopTree BBS 2.0.1a and earlier allow

23RISCO

abrir ↗

Referência

CVE-2007-2583

CVE-2007-2583—

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depen

28RISCO

abrir ↗

Referência

CVE-2010-1952

CVE-2010-1952—

Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.