Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Journalness 4.1 - 'last_module' Remote Code Execution

CVE-2007-5056—webappsphp

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including

28RISCO

abrir ↗

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5110—remotewindows

Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5111—remotewindows

A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Novus 1.0 - 'notas.asp?nota_id' SQL Injection

CVE-2007-5123—webappsasp

SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Mambads 1.5 - SQL Injection

CVE-2007-5177—webappsphp

SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Segue CMS 1.8.4 - 'index.php' Remote File Inclusion

CVE-2007-5186—webappsphp

PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled,

35RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion module Expanded Calendar 2.x - SQL Injection

CVE-2007-5187—webappsphp

SQL injection vulnerability in infusions/calendar_events_panel/show_single.php in the Expanded Calendar 2.x module for P

23RISCO

abrir ↗

Referência✓ VexDay Proof

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service

CVE-2007-5219—doswindows

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLA

28RISCO

abrir ↗

Referência✓ VexDay Proof

Vigile CMS 1.4 - Multiple Vulnerabilities

CVE-2007-6087—webappsphp

Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admi

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBBViet 02.03.2007 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-6088—webappsphp

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Freelancers Script 1 - SQL Injection

CVE-2007-6125—webappsphp

SQL injection vulnerability in search_form.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple QuickTime 7.2/7.3 - RTSP Response Remote Overwrite (SEH)

CVE-2007-6166—dosmultiple

Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac

50RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Safari / QuickTime 7.3 - RTSP Content-Type Remote Buffer Overflow

CVE-2007-6166—remoteosx

Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac

50RISCO

abrir ↗

Referência✓ VexDay Proof

LearnLoop 2.0beta7 - 'sFilePath' Remote File Disclosure

CVE-2007-6214—webappsphp

Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web-MeetMe 3.0.3 - 'play.php' Remote File Disclosure

CVE-2007-6215—webappsphp

Multiple directory traversal vulnerabilities in play.php in Web-MeetMe 3.0.3 allow remote attackers to read arbitrary fi

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Garage 1.2.0 Beta3 - SQL Injection

CVE-2007-6223—webappsphp

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rayzz Script 2.0 - Local/Remote File Inclusion

CVE-2007-6229—webappsphp

PHP remote file inclusion vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

tellmatic 1.0.7 - Multiple Remote File Inclusions

CVE-2007-6231—webappsphp

Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

ftp Admin 0.1.0 - Local File Inclusion / Cross-Site Scripting / Authentication Bypass

CVE-2007-6232—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

RealPlayer 11 - '.au' Denial of Service

CVE-2007-6235—doswindows

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (applicatio

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Media Player - '.AIFF' Divide By Zero Exception Denial of Service (PoC)

CVE-2007-6236—doswindows

Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a cert

28RISCO

abrir ↗

Referência✓ VexDay Proof

Snitz Forums 2000 - 'Active.asp' SQL Injection

CVE-2007-6240—webappsasp

SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

xml2owl 0.1.1 - 'filedownload.php' Remote File Disclosure

CVE-2007-6322—webappsphp

Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files v

23RISCO

abrir ↗

Referência✓ VexDay Proof

HP Compaq Notebooks - ActiveX Remote Code Execution

CVE-2007-6331—remotewindows

Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP

35RISCO

abrir ↗

Referência✓ VexDay Proof

BadBlue 2.72 - PassThru Remote Buffer Overflow

CVE-2007-6377—remotewindows

Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attacker

50RISCO

abrir ↗

Referência✓ VexDay Proof

Vantage Linguistics AnswerWorks 4 - API ActiveX Control Buffer Overflow

CVE-2007-6387—remotewindows

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Van

35RISCO

abrir ↗

Referência✓ VexDay Proof

Adult Script 1.6 - Unauthorized Administrative Access

CVE-2007-6414—webappsphp

admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Anon Proxy Server 0.1000 - Remote Command Execution

CVE-2007-6459—webappsphp

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharact

23RISCO

abrir ↗

Referência✓ VexDay Proof

Form Tools 1.5.0b - Multiple Remote File Inclusions

CVE-2007-6464—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop 2.2.1 - Blind SQL Injection

CVE-2007-6466—webappsphp

Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.