Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - SQL Injection

CVE-2007-4312—webappsphp

SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP blue dragon CMS 3.0.0 - Remote File Inclusion

CVE-2007-4313—webappsphp

PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 all

35RISCO

abrir ↗

Referência✓ VexDay Proof

Cadre PHP Framework - Remote File Inclusion

CVE-2007-0677—webappsphp

PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Foro Domus 2.10 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0580—webappsphp

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

EclipseBB 0.5.0 Lite - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0581—webappsphp

PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

chernobiLe Portal 1.0 - 'default.asp' SQL Injection

CVE-2007-0582—webappsasp

SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

forum livre 1.0 - SQL Injection / Cross-Site Scripting

CVE-2007-0589—webappsasp

SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user pa

23RISCO

abrir ↗

Referência✓ VexDay Proof

forum livre 1.0 - SQL Injection / Cross-Site Scripting

CVE-2007-0590—webappsasp

Cross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual Path 1.0 - '/vp/configure.php' Remote File Inclusion

CVE-2007-0591—webappsphp

PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

makit Newsposter Script 3.0 - SQL Injection

CVE-2007-0600—webappsasp

SQL injection vulnerability in news_page.asp in Martyn Kilbryde Newsposter Script (aka makit news/blog poster) 3 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyNews 4.2.2 - 'themefunc.php' Remote File Inclusion

CVE-2007-0633—webappsphp

PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hailboards 1.2.0 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0662—webappsphp

PHP remote file inclusion vulnerability in includes/usercp_viewprofile.php in Hailboards 1.2.0 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fullaspsite Asp Hosting Sitesi - 'tr' SQL Injection

CVE-2007-0678—webappsasp

SQL injection vulnerability in windows.asp in Fullaspsite Asp Hosting Sitesi allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

ExoPHPDesk 1.2.1 - 'faq.php' SQL Injection

CVE-2007-0676—webappsphp

SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyRing 4.1.3b - 'fichier' Remote File Inclusion

CVE-2007-0679—webappsphp

PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACGVannu 1.3 - 'index2.php' Remote User Pass Change

CVE-2007-0697—webappsphp

index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modifie

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightRO CMS 1.0 - 'inhalt.php' Remote File Inclusion

CVE-2007-0824—webappsphp

PHP remote file inclusion vulnerability in inhalt.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kisisel Site 2007 - 'tr' SQL Injection

CVE-2007-0826—webappsphp

SQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alibaba Alipay - Remove ActiveX Remote Code Execution

CVE-2007-0827—remotewindows

The Alibaba Alipay PTA Module ActiveX control (PTA.DLL) allows remote attackers to execute arbitrary code via a JavaScri

23RISCO

abrir ↗

Referência✓ VexDay Proof

OPENi-CMS Site Protection Plugin - Remote File Inclusion

CVE-2007-0881—webappsphp

PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Axigen 2.0.0b1 - Remote Denial of Service (1)

CVE-2007-0886—doslinux

Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (applic

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightRO CMS 1.0 - 'index.php?projectid' SQL Injection

CVE-2007-0904—webappsphp

SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

philboard 1.14 - 'philboard_forum.asp' SQL Injection

CVE-2007-0920—webappsasp

SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - Arbitrary File Upload

CVE-2007-0972—webappsphp

Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload a

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActSoft DVD-Tools - 'dvdtools.ocx' Remote Buffer Overflow

CVE-2007-0976—remotewindows

Buffer overflow in the ActSoft DVD-Tools ActiveX control (dvdtools.ocx) allows remote attackers to execute arbitrary cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - '/index.php' Local/Remote File Inclusion

CVE-2007-0987—webappsphp

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Htaccess Passwort Generator 1.1 - 'ht_pfad' Remote File Inclusion

CVE-2007-1013—webappsphp

PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

VS-News-System 1.2.1 - 'newsordner' Remote File Inclusion

CVE-2007-1017—webappsphp

PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.01.02 - 'showonly' Blind SQL Injection

CVE-2007-1019—webappsphp

SQL injection vulnerability in news.php in webSPELL 4.01.02, when register_globals is enabled, allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebprojectDB 0.1.3 - 'INCDIR' Remote File Inclusion

CVE-2006-2995—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebprojectDB 0.1.3 and earlier allow remote attackers to execute a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.