Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

22.910 exploits

Referência✓ VexDay Proof

ScriptMagix Photo Rating 2.0 - SQL Injection

CVE-2007-1619—webappsphp

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP DB Designer 1.02 - Remote File Inclusion

CVE-2007-1620—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute

28RISCO

abrir ↗

Referência✓ VexDay Proof

Active Photo Gallery - 'catid' SQL Injection

CVE-2007-1629—webappsasp

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2019-9670

CVE-2019-9670CRITICALsob ataque

mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XX

100RISCO

abrir ↗

Referência

CVE-2019-9670

CVE-2019-9670CRITICALsob ataque

mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XX

100RISCO

abrir ↗

Referência

CVE-2022-44877

CVE-2022-44877CRITICALsob ataque

100RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution

CVE-2007-1998—webappsphp

Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

gtcatalog 0.9.1 - 'index.php' Remote File Inclusion

CVE-2006-5923—webappsphp

PHP remote file inclusion vulnerability in index.php in Chris Mac gtcatalog (aka GimeScripts Shopping Catalog) 0.9.1 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scorp Book 1.0 - 'smilies.php?config' Remote File Inclusion

CVE-2007-1937—webappsphp

PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Rha7 Downloads 1.0 - 'visit.php' SQL Injection

CVE-2007-1960—webappsphp

SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.3 - Remote Code Execution

CVE-2007-1963—webappsphp

SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module WF-Section 1.01 - 'articleId' SQL Injection

CVE-2007-1974—webappsphp

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module XFsection 1.07 - 'articleId' Blind SQL Injection

CVE-2007-1974—webappsphp

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Zmagazine 1.0 - 'print.php' SQL Injection

CVE-2007-1974—webappsphp

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Module Arcade 1.0 - 'cid' SQL Injection

CVE-2007-1978—webappsphp

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module PopnupBlog 2.52 - 'postid' Blind SQL Injection

CVE-2007-1979—webappsphp

SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Module topliste 1.0 - 'cid' SQL Injection

CVE-2007-1980—webappsphp

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

AROUNDMe 0.7.7 - Multiple Remote File Inclusions

CVE-2007-1986—webappsphp

Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Weatimages 1.7.1 - ini[langpack] Remote File Inclusion

CVE-2007-1999—webappsphp

PHP remote file inclusion vulnerability in index.php in Weatimages 1.7.1 and earlier, when weatimages.ini is missing, al

23RISCO

abrir ↗

Referência✓ VexDay Proof

InoutMailingListManager 3.1 - Remote Command Execution

CVE-2007-2003—webappsphp

InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.