Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

AtomixMP3 2.3 - '.pls' Local Buffer Overflow

CVE-2007-4803—localwindows

Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in fil

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.0 - Local File Inclusion

CVE-2007-4805—webappsphp

Directory traversal vulnerability in getgalldata.php in fuzzylime (cms) 3.0 and earlier allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultra Crypto Component - 'CryptoX.dll 2.0 SaveToFile()' Insecure Method

CVE-2007-4902—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Co

23RISCO

abrir ↗

Referência✓ VexDay Proof

NuclearBB Alpha 2 - 'ROOT_PATH' Remote File Inclusion

CVE-2007-4906—webappsphp

PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is e

35RISCO

abrir ↗

Referência✓ VexDay Proof

Boa 0.93.15 - HTTP Basic Authentication Bypass

CVE-2007-4915—remotelinux

The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent st

50RISCO

abrir ↗

Referência✓ VexDay Proof

OpenH323 Opal SIP Protocol - Remote Denial of Service

CVE-2007-4924—doswindows

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remo

28RISCO

abrir ↗

Referência✓ VexDay Proof

Shop-Script FREE 2.0 - Remote Command Execution

CVE-2007-4932—webappsphp

admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpFFL 1.24 - 'PHPFFL_FILE_ROOT' Remote File Inclusion

CVE-2007-4934—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code v

28RISCO

abrir ↗

Referência✓ VexDay Proof

Omnistar Article Manager Software - 'article.php' SQL Injection

CVE-2007-4952—webappsphp

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpCMS - 'keyword' SQL Injection

CVE-2007-4953—webappsphp

SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the ke

23RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP 1.0 sondages Module - SQL Injection

CVE-2007-4979—webappsphp

SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

MW6 Technologies QRCode ActiveX 3.0 - Remote File Overwrite

CVE-2007-4982—remotewindows

Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Techn

28RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Mod Ktauber.com StylesDemo - Blind SQL Injection

CVE-2007-4984—webappsphp

SQL injection vulnerability in index.php in the Ktauber.com StylesDemo mod for phpBB 2.0.xx allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

iziContents rc6 - Local/Remote File Inclusion

CVE-2007-5054—webappsphp

Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute ar

35RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Made Simple 1.2 - Remote Code Execution

CVE-2007-5056—webappsphp

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including

28RISCO

abrir ↗

Referência✓ VexDay Proof

Journalness 4.1 - 'last_module' Remote Code Execution

CVE-2007-5056—webappsphp

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including

28RISCO

abrir ↗

Referência✓ VexDay Proof

Aqua CMS - 'Username' SQL Injection

CVE-2009-1317—webappsphp

Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magic_quotes_gpc is disabled, allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zervit Web Server 0.02 - Remote Buffer Overflow (PoC)

CVE-2009-1353—doswindows

Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elecard AVC HD Player - '.XPL' Stack Buffer Overflow (SEH) (PoC)

CVE-2009-1356—doswindows

Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 fi

23RISCO

abrir ↗

Referência✓ VexDay Proof

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

CVE-2009-1612—remotewindows

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote

50RISCO

abrir ↗

Referência✓ VexDay Proof

Teraway LiveHelp 2.0 - Insecure Cookie Handling

CVE-2009-1618—webappsphp

Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&us

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easy Scripts Answer and Question Script - Multiple Vulnerabilities

CVE-2009-1664—webappsphp

myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords

23RISCO

abrir ↗

Referência✓ VexDay Proof

Soulseek 157 NS x/156.x - Remote Distributed Search Code Execution

CVE-2009-1830—doswindows

Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long sear

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.55 - MAKI Script Universal Overwrite (SEH)

CVE-2009-1831—localwindows

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute

50RISCO

abrir ↗

Referência✓ VexDay Proof

phpBugTracker 1.0.3 - Authentication Bypass

CVE-2009-1850—webappsphp

SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebThings 1.5.2 - 'help.php?module' Local File Inclusion

CVE-2009-2081—webappsphp

Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mundi Mail 0.8.2 - 'top' Remote File Inclusion

CVE-2009-2095—webappsphp

PHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in Mundi Mail 0.8.2, when regi

23RISCO

abrir ↗

Referência✓ VexDay Proof

OCS Inventory NG 1.02 - Remote File Disclosure

CVE-2009-2166—webappsphp

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to re

23RISCO

abrir ↗

Referência✓ VexDay Proof

vBulletin Radio and TV Player AddOn - HTML Injection

CVE-2009-2172—webappsphp

Cross-site scripting (XSS) vulnerability in forum/radioandtv.php in the Radio and TV Player addon for vBulletin allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyReports 3.0.11 - 'lib_head.php' Remote File Inclusion

CVE-2007-0571—webappsphp

PHP remote file inclusion vulnerability in include/lib/lib_head.php in phpMyReports 3.0.11 and earlier allows remote att

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.