Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2010-0380

CVE-2010-0380—

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictio

23RISCO

abrir ↗

Referência✓ VexDay Proof

LiveAlbum 0.9.0 - 'common.php' Remote File Inclusion

CVE-2007-5315—webappsphp

PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remot

35RISCO

abrir ↗

Referência✓ VexDay Proof

Ubuntu 6.06 - DHCPd Remote Denial of Service

CVE-2007-5365—dosmultiple

Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some othe

45RISCO

abrir ↗

Referência✓ VexDay Proof

LightBlog 8.4.1.1 - Remote Code Execution

CVE-2007-5374—webappsphp

cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, wh

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pindorama 0.1 - 'client.php' Remote File Inclusion

CVE-2007-5387—webappsphp

PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2022-35914

CVE-2022-35914CRITICALsob ataque

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RISCO

abrir ↗

Referência

CVE-2020-1472

CVE-2020-1472MEDIUMsob ataqueransomware

Netlogon Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Referência

CVE-2020-1472

CVE-2020-1472MEDIUMsob ataqueransomware

Netlogon Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Garage 1.2.0 Beta3 - SQL Injection

CVE-2007-6223—webappsphp

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rayzz Script 2.0 - Local/Remote File Inclusion

CVE-2007-6229—webappsphp

PHP remote file inclusion vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

tellmatic 1.0.7 - Multiple Remote File Inclusions

CVE-2007-6231—webappsphp

Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

ftp Admin 0.1.0 - Local File Inclusion / Cross-Site Scripting / Authentication Bypass

CVE-2007-6232—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Media Player - '.AIFF' Divide By Zero Exception Denial of Service (PoC)

CVE-2007-6236—doswindows

Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a cert

28RISCO

abrir ↗

Referência✓ VexDay Proof

Snitz Forums 2000 - 'Active.asp' SQL Injection

CVE-2007-6240—webappsasp

SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

HP Compaq Notebooks - ActiveX Remote Code Execution

CVE-2007-6333—remotewindows

The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 i

23RISCO

abrir ↗

Referência✓ VexDay Proof

SineCMS 2.3.4 - Calendar SQL Injection

CVE-2007-6366—webappsphp

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin PictPress 0.91 - Remote File Disclosure

CVE-2007-6369—webappsphp

Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

BadBlue 2.72 - PassThru Remote Buffer Overflow

CVE-2007-6377—remotewindows

Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attacker

50RISCO

abrir ↗

Referência✓ VexDay Proof

Adult Script 1.6 - Unauthorized Administrative Access

CVE-2007-6414—webappsphp

admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which all

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop 2.2.1 - Blind SQL Injection

CVE-2007-6466—webappsphp

Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

MOG-WebShop - 'index.php?group' SQL Injection

CVE-2007-6466—webappsphp

Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

gf-3xplorer 2.4 - Cross-Site Scripting / Local File Inclusion

CVE-2007-6476—webappsphp

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php

23RISCO

abrir ↗

Referência✓ VexDay Proof

falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting

CVE-2007-6490—webappsphp

Cross-site request forgery (CSRF) vulnerability in Falcon Series One CMS 1.4.3 allows remote attackers to change a passw

23RISCO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6496—webappsasp

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to host

23RISCO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6503—webappsasp

Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users

23RISCO

abrir ↗

Referência✓ VexDay Proof

HP Software Update Client 3.0.8.4 - Multiple Vulnerabilities

CVE-2007-6506—doswindows

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlie

28RISCO

abrir ↗

Referência

CVE-2007-6515

CVE-2007-6515—

support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator charact

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS 1.6 - Multiple Vulnerabilities

CVE-2007-6547—webappsphp

RunCMS before 1.6.1 does not require entry of the old password during a password change, which allows context-dependent

23RISCO

abrir ↗

Referência✓ VexDay Proof

LoudBlog 0.6.1 - 'parsedpage' Remote Code Execution

CVE-2008-0139—webappsphp

Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to exec

28RISCO

abrir ↗

Referência

CVE-2010-0607

CVE-2010-0607—

Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote att

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.