Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5110—remotewindows

Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5111—remotewindows

A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Novus 1.0 - 'notas.asp?nota_id' SQL Injection

CVE-2007-5123—webappsasp

SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

NagiosQL 2005 2.00 - 'prepend_adm.php' Remote File Inclusion

CVE-2007-2709—webappsphp

PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2005 2.00 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Chupix CMS 0.2.3 - 'repertoire' Remote File Inclusion

CVE-2007-5139—webappsphp

PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when register_globals is enabled, a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SyntaxCMS 1.3 - 'FCKeditor' Arbitrary File Upload

CVE-2007-5156—webappsphp

Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.

23RISCO

abrir ↗

Referência✓ VexDay Proof

actSite 1.56 - 'news.php' Local File Inclusion

CVE-2007-5174—webappsphp

Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Mambads 1.5 - SQL Injection

CVE-2007-5177—webappsphp

SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

smbftpd 0.96 - SMBDirList-function Remote Format String

CVE-2007-5184—remotelinux

Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute a

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP wcms XT 0.0.7 - Multiple Remote File Inclusions

CVE-2007-5185—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execut

35RISCO

abrir ↗

Referência✓ VexDay Proof

Segue CMS 1.8.4 - 'index.php' Remote File Inclusion

CVE-2007-5186—webappsphp

PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled,

35RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module mx_glance 2.3.3 - Remote File Inclusion

CVE-2007-5178—webappsphp

contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment bec

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion module Expanded Calendar 2.x - SQL Injection

CVE-2007-5187—webappsphp

SQL injection vulnerability in infusions/calendar_events_panel/show_single.php in the Expanded Calendar 2.x module for P

23RISCO

abrir ↗

Referência✓ VexDay Proof

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service

CVE-2007-5219—doswindows

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLA

28RISCO

abrir ↗

Referência✓ VexDay Proof

MD-Pro 1.0.76 - SQL Injection

CVE-2007-5222—webappsphp

SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak

CVE-2007-5225—localsolaris

Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the co

23RISCO

abrir ↗

Referência✓ VexDay Proof

PMOS Help Desk 2.4 - Remote Command Execution

CVE-2007-6550—webappsphp

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ossigeno CMS 2.2a3 - 'footer.php' Remote File Inclusion

CVE-2007-5234—webappsphp

PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers t

35RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Live! 3.2.2 - 'questid' SQL Injection (1)

CVE-2008-0821—webappsphp

SQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple CMS 1.0.3 - 'area' SQL Injection

CVE-2008-0835—webappsphp

SQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebThings 1.4 - 'msg'/'forum' SQL Injection

CVE-2005-4218—webappsphp

SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyGallery 5.0tr - Multiple Vulnerabilities

CVE-2008-1346—webappsphp

SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Knowledge Base Mod 2.0.2 - 'phpBB' Remote File Inclusion

CVE-2006-2134—webappsphp

PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cmaps v8.0 - SQL injection

CVE-2023-29809CRITICALwebappsphp

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbit

53RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Wordspew - SQL Injection

CVE-2008-0682—webappsphp

SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

VS-News-System 1.2.1 - 'newsordner' Remote File Inclusion

CVE-2007-1017—webappsphp

PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

EZContents CMS 2.0.0 - Multiple SQL Injections

CVE-2008-2135—webappsphp

Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Studio Lounge Address Book 2.5 - 'profile' Arbitrary File Upload

CVE-2009-1483—webappsphp

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable

23RISCO

abrir ↗

Referência✓ VexDay Proof

PrecisionID Barcode ActiveX 1.3 - Denial of Service

CVE-2007-2657—doswindows

Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

My PHP Indexer 1.0 - 'index.php' Local File Download

CVE-2008-6183—webappsphp

Multiple directory traversal vulnerabilities in index.php in My PHP Indexer 1.0 allow remote attackers to read arbitrary

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.