Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.449exploits catalogados

35.552CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8.649Nuclei 4.283Metasploit 3.474✓ só verificadosrecentes populares risco

24.451 exploits

Exploit-DB✓ VexDay Proof

Audins Audiens 3.3 - '/system/index.php?Cookie PHPSESSID' SQL Injection

CVE-2007-1242—webappsphp26 fev 2007

SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote attackers to execute arbitrary SQL c

23RISCO

Exploit-DB✓ VexDay Proof

Audins Audiens 3.3 - 'setup.php?PATH_INFO' Cross-Site Scripting

CVE-2007-1241—webappsphp26 fev 2007

Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary

23RISCO

Exploit-DB✓ VexDay Proof

Oracle 9i/10g ACTIVATE_SUBSCRIPTION - SQL Injection (2)

CVE-2005-4832—remotemultiple26 fev 2007

SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL

50RISCO

Exploit-DB✓ VexDay Proof

Audins Audiens 3.3 - 'unistall.php' Authentication Bypass

CVE-2007-1243—webappsphp26 fev 2007

Audins Audiens 3.3 allows remote attackers to bypass authentication and perform certain privileged actions, possibly an

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows XP/2003 - Explorer '.WMF' File Handling Denial of Service

CVE-2007-1090—doswindows25 fev 2007

Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (cr

28RISCO

Exploit-DB✓ VexDay Proof

Active Calendar 1.2 - '/data/js.php?css' Cross-Site Scripting

CVE-2007-1111—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w

23RISCO

Exploit-DB✓ VexDay Proof

Active Calendar 1.2 - '/data/m_3.php?css' Cross-Site Scripting

CVE-2007-1111—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w

23RISCO

Exploit-DB✓ VexDay Proof

Active Calendar 1.2 - '/data/mysqlevents.php?css' Cross-Site Scripting

CVE-2007-1111—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w

23RISCO

Exploit-DB✓ VexDay Proof

Active Calendar 1.2 - '/data/flatevents.php?css' Cross-Site Scripting

CVE-2007-1111—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w

23RISCO

Exploit-DB✓ VexDay Proof

Active Calendar 1.2 - '/data/m_4.php?css' Cross-Site Scripting

CVE-2007-1111—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w

23RISCO

Exploit-DB✓ VexDay Proof

Active Calendar 1.2 - '/data/y_2.php?css' Cross-Site Scripting

CVE-2007-1111—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w

23RISCO

Exploit-DB✓ VexDay Proof

Active Calendar 1.2 - '/data/y_3.php?css' Cross-Site Scripting

CVE-2007-1111—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w

23RISCO

Exploit-DB✓ VexDay Proof

Active Calendar 1.2 - '/data/m_2.php?css' Cross-Site Scripting

CVE-2007-1111—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w

23RISCO

Exploit-DB✓ VexDay Proof

Active Calendar 1.2 - 'showcode.php' Local File Inclusion

CVE-2007-1110—webappsphp24 fev 2007

Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary

23RISCO

Exploit-DB✓ VexDay Proof

PhotoStand 1.2 - 'index.php' Cross-Site Scripting

CVE-2007-1101—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web s

23RISCO

Exploit-DB✓ VexDay Proof

Docebo CMS 3.0.x - 'index.php?searchkey' Cross-Site Scripting

CVE-2007-1240—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject a

23RISCO

Exploit-DB✓ VexDay Proof

Pickle 0.3 - 'download.php' Local File Inclusion

CVE-2007-1100—webappsphp24 fev 2007

Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read

23RISCO

Exploit-DB✓ VexDay Proof

Docebo CMS 3.0.x - '/modules/htmlframechat/index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2007-1240—webappsphp24 fev 2007

Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject a

23RISCO

Exploit-DB✓ VexDay Proof

News Rover 12.1 Rev 1 - Stack Overflow (2)

CVE-2007-1041—localwindows24 fev 2007

Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute ar

23RISCO

Exploit-DB✓ VexDay Proof

Simple one-file Gallery - 'gallery.php?f' Traversal Arbitrary File Access

CVE-2007-1124—webappsphp23 fev 2007

Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbi

23RISCO

Exploit-DB✓ VexDay Proof

Shop Kit Plus - 'StyleCSS.php' Local File Inclusion

CVE-2007-1127—webappsphp23 fev 2007

Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files via

23RISCO

Exploit-DB✓ VexDay Proof

Oracle 10g Database - 'SUBSCRIPTION_NAME' SQL Injection (1)

CVE-2005-4832—remotemultiple23 fev 2007

SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL

50RISCO

Exploit-DB✓ VexDay Proof

Oracle 9i/10g - DBMS_METADATA.GET_DDL SQL Injection

CVE-2006-0549—remotemultiple23 fev 2007

SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions,

23RISCO

Exploit-DB✓ VexDay Proof

XT:Commerce 3.04 - 'index.php' Local File Inclusion

CVE-2007-1126—webappsphp23 fev 2007

Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (d

23RISCO

Exploit-DB✓ VexDay Proof

Oracle 9i/10g - ACTIVATE_SUBSCRIPTION SQL Injection

CVE-2005-4832—remotewindows23 fev 2007

SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL

50RISCO

Exploit-DB✓ VexDay Proof

Simple one-file Gallery - 'gallery.php?f' Cross-Site Scripting

CVE-2007-1125—webappsphp23 fev 2007

Cross-site scripting (XSS) vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to in

23RISCO

Exploit-DB✓ VexDay Proof

Pheap 1.x/2.0 - 'edit.php' Directory Traversal

CVE-2007-1140—webappsphp22 fev 2007

Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a

23RISCO

Exploit-DB✓ VexDay Proof

Oracle 10g - KUPV$FT.ATTACH_JOB Grant/Revoke dba Permission

CVE-2006-0586—remotemultiple22 fev 2007

Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arb

23RISCO

Exploit-DB✓ VexDay Proof

Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access

CVE-2007-1152—webappsphp22 fev 2007

Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a

23RISCO

Exploit-DB✓ VexDay Proof

Plantilla - 'list_main_pages.php?nfolder' Traversal Arbitrary File Access

CVE-2007-1138—webappsphp22 fev 2007

Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attac

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.