Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

22.429 exploits

Referência✓ VexDay Proof

pl-PHP Beta 0.9 - Multiple Vulnerabilities

CVE-2007-2008—webappsphp

Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitra

23RISCO

abrir ↗

Referência

CVE-2017-17584

CVE-2017-17584—

FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module Weather - 'absolute_path' Remote File Inclusion

CVE-2007-2044—webappsphp

PHP remote file inclusion vulnerability in mod_weather.php in the Antonis Ventouris Weather module for Mambo and Joomla!

23RISCO

abrir ↗

Referência✓ VexDay Proof

VCDGear 3.56 Build 050213 - 'FILE' Local Code Execution

CVE-2007-2062—localwindows

Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers to execute arbitrary cod

23RISCO

abrir ↗

Referência

CVE-2017-17585

CVE-2017-17585—

FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Slider 0.6 - 'path' Remote File Inclusion

CVE-2007-2067—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Marco Antonio Islas Cruz Web Slider (WebSlider) 0.6 allow remote a

23RISCO

abrir ↗

Referência

CVE-2017-17585

CVE-2017-17585—

FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

StoreFront for Gallery - 'GALLERY_BASEDIR' Remote File Inclusion

CVE-2007-2068—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

openMairie 1.10 - '/scr/soustab.php' Local File Inclusion

CVE-2007-2069—webappsphp

Directory traversal vulnerability in scr/soustab.php in openMairie 1.11 and earlier allows remote attackers to include a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunShop Shopping Cart 3.5 - 'abs_path' Remote File Inclusion

CVE-2007-2070—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

xoops module tsdisplay4xoops 0.1 - Remote File Inclusion

CVE-2007-2091—webappsphp

PHP remote file inclusion vulnerability in blocks/tsdisplay4xoops_block2.php in tsdisplay4xoops (TSD4XOOPS, aka the Team

23RISCO

abrir ↗

Referência✓ VexDay Proof

ShoutPro 1.5.2 - 'shout.php' Remote Code Injection

CVE-2007-2141—webappsphp

Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary

35RISCO

abrir ↗

Referência

CVE-2017-17586

CVE-2017-17586—

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Template Be2004-2 - 'index.php' Remote File Inclusion

CVE-2007-2143—webappsphp

PHP remote file inclusion vulnerability in index.php in the Be2004-2 template for Joomla! allows remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2017-17586

CVE-2017-17586—

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JoomlaPack 1.0.4a2 RE - 'CAltInstaller.php' Remote File Inclusion

CVE-2007-2144—webappsphp

PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE component

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cabron Connector 1.1.0-Full - Remote File Inclusion

CVE-2007-2154—webappsphp

PHP remote file inclusion vulnerability in services/samples/inclusionService.php in Cabron Connector 1.1.0 allows remote

23RISCO

abrir ↗

Referência

CVE-2017-17587

CVE-2017-17587—

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rezervi 0.9 - 'root' Remote File Inclusion

CVE-2007-2156—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PH

28RISCO

abrir ↗

Referência✓ VexDay Proof

AimStats 3.2 - 'process.php?update' Remote Code Execution

CVE-2007-2167—webappsphp

Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into confi

35RISCO

abrir ↗

Referência

CVE-2017-17588

CVE-2017-17588—

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id par

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mozzers SubSystem final - 'subs.php' Remote Code Execution

CVE-2007-2169—webappsphp

Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.3 - '.wmv' Remote Denial of Service

CVE-2007-2180—doswindows

Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBInsta FM 0.1.4 - 'login.php' absolute_path Remote File Inclusion

CVE-2007-2181—webappsphp

PHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Ring Webring System 0.9 - SQL Injection

CVE-2007-2183—webappsphp

SQL injection vulnerability in index.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Supasite 1.23b - Multiple Remote File Inclusions

CVE-2007-2185—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPGlossar 0.8 - 'format_menue' Remote File Inclusion

CVE-2007-2751—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor Backup 11.5.2.0 - 'caloggderd.exe' Denial of Service

CVE-2007-2772—doswindows

(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 all

28RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Denial of Service

CVE-2007-2772—doswindows

(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 all

28RISCO

abrir ↗

Referência

CVE-2017-17597

CVE-2017-17597—

Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.