Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow

CVE-2007-3876—localosx

Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pictures Rating - 'index.php?msgid' SQL Injection

CVE-2007-3881—webappsphp

SQL injection vulnerability in index.php in Pictures Rating (Picture Rating) allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Data Dynamics ActiveBar - ActiveX 'actbar3.ocx 3.1' Insecure Methods

CVE-2007-3883—remotewindows

The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunShop Shopping Cart 4.0 RC 6 - 'Search' Blind SQL Injection

CVE-2007-4597—webappsphp

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Micro CMS 3.5 - 'revert-content.php' SQL Injection

CVE-2007-4602—webappsphp

SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS (Micro-CMS) 3.5 allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

ABC estore 3.0 - 'cat_id' Blind SQL Injection

CVE-2007-4627—webappsphp

SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultra Crypto Component - 'CryptoX.dll 2.0 SaveToFile()' Insecure Method

CVE-2007-4902—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Co

23RISCO

abrir ↗

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5110—remotewindows

Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5111—remotewindows

A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Novus 1.0 - 'notas.asp?nota_id' SQL Injection

CVE-2007-5123—webappsasp

SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Mambads 1.5 - SQL Injection

CVE-2007-5177—webappsphp

SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Segue CMS 1.8.4 - 'index.php' Remote File Inclusion

CVE-2007-5186—webappsphp

PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled,

35RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion module Expanded Calendar 2.x - SQL Injection

CVE-2007-5187—webappsphp

SQL injection vulnerability in infusions/calendar_events_panel/show_single.php in the Expanded Calendar 2.x module for P

23RISCO

abrir ↗

Referência✓ VexDay Proof

CyberLink PowerDVD - CreateNewFile Remote Rewrite Denial of Service

CVE-2007-5219—doswindows

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLA

28RISCO

abrir ↗

Referência✓ VexDay Proof

xml2owl 0.1.1 - 'filedownload.php' Remote File Disclosure

CVE-2007-6322—webappsphp

Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files v

23RISCO

abrir ↗

Referência✓ VexDay Proof

HP Compaq Notebooks - ActiveX Remote Code Execution

CVE-2007-6331—remotewindows

Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP

35RISCO

abrir ↗

Referência✓ VexDay Proof

BadBlue 2.72 - PassThru Remote Buffer Overflow

CVE-2007-6377—remotewindows

Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attacker

50RISCO

abrir ↗

Referência✓ VexDay Proof

Vantage Linguistics AnswerWorks 4 - API ActiveX Control Buffer Overflow

CVE-2007-6387—remotewindows

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Van

35RISCO

abrir ↗

Referência✓ VexDay Proof

Adult Script 1.6 - Unauthorized Administrative Access

CVE-2007-6414—webappsphp

admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Anon Proxy Server 0.1000 - Remote Command Execution

CVE-2007-6459—webappsphp

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharact

23RISCO

abrir ↗

Referência✓ VexDay Proof

Form Tools 1.5.0b - Multiple Remote File Inclusions

CVE-2007-6464—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop 2.2.1 - Blind SQL Injection

CVE-2007-6466—webappsphp

Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH

CVE-2008-0166—remotelinux

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RISCO

abrir ↗

Referência✓ VexDay Proof

OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH

CVE-2008-0166—remotelinux

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RISCO

abrir ↗

Referência✓ VexDay Proof

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (PoC)

CVE-2009-0174—doswindows

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin My_Gallery 2.3 - Arbitrary File Download

CVE-2008-1702—webappsphp

Absolute path traversal vulnerability in dload.php in the my_gallery 2.3 plugin for e107 allows remote attackers to obta

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS 2.3.1 - Multiple Local File Inclusions

CVE-2008-6884—webappsphp

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled, allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion

CVE-2006-4074—webappsphp

PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component (com_jd-wiki) 1.0.2 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

SyndeoCMS 2.6.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-5272—webappsphp

Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read a

23RISCO

abrir ↗

Referência✓ VexDay Proof

MP3 TrackMaker 1.5 - '.mp3' Local Heap Overflow (PoC)

CVE-2009-0175—doswindows

Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.