Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Microsoft Windows - GDI+ '.ICO' File Remote Denial of Service

CVE-2007-2237—doswindows

Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of

28RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe Photoshop CS2 / CS3 - '.bmp' Local Buffer Overflow

CVE-2007-2244—localwindows

Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attac

35RISCO

abrir ↗

Referência✓ VexDay Proof

Linksys SPA941 - Remote Reboot (Denial of Service)

CVE-2007-2270—doshardware

The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 0377 (0xff) cha

23RISCO

abrir ↗

Referência✓ VexDay Proof

USP FOSS Distribution 1.01 - 'dnld' Remote File Disclosure

CVE-2007-2271—webappsphp

Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

ABC-View Manager 1.42 - '.psp' Local Buffer Overflow

CVE-2007-2284—localwindows

Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted .

23RISCO

abrir ↗

Referência✓ VexDay Proof

IrfanView 4.00 - '.iff' Local Buffer Overflow

CVE-2007-2363—localwindows

Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to execute arbitrary code via a craf

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACGVAnnu 1.3 - 'acgv.php?rubrik' Local File Inclusion

CVE-2007-2560—webappsphp

Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wikivi5 - 'show.php?sous_rep' Remote File Inclusion

CVE-2007-2570—webappsphp

PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module wfquotes 1.0 - SQL Injection

CVE-2007-2571—webappsphp

SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

NoAh 0.9 pre 1.2 - 'mfa_theme.php' Remote File Inclusion

CVE-2007-2572—webappsphp

PHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka PHP Content Architect,

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPtree 1.3 - 'cms2.php?s_dir' Remote File Inclusion

CVE-2007-2573—webappsphp

PHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Archangel Weblog 0.90.02 - Local File Inclusion / Authentication Bypass

CVE-2007-2574—webappsphp

Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary fil

23RISCO

abrir ↗

Referência✓ VexDay Proof

telltarget 1.3.3 - 'tt_docroot' Remote File Inclusion

CVE-2007-2597—webappsphp

Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary P

28RISCO

abrir ↗

Referência✓ VexDay Proof

Original 0.11 - 'config.inc.php?x[1]' Remote File Inclusion

CVE-2007-2620—webappsphp

PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

webdesproxy 0.0.1 - GET Remote Buffer Overflow

CVE-2007-2668—remotewindows

Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involvin

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Classifieds Listings 1.0 - SQL Injection

CVE-2007-2675—webappsphp

SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

runawaysoft haber portal 1.0 - 'tr' Multiple Vulnerabilities

CVE-2007-2753—webappsasp

RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Build it Fast (bif3) 0.4.1 - Multiple Remote File Inclusions

CVE-2007-2762—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1 allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eudora 7.1 - SMTP ResponseRemote Remote Buffer Overflow

CVE-2007-2770—remotewindows

Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a long

23RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor Backup 11.5.2.0 - 'caloggderd.exe' Denial of Service

CVE-2007-2772—doswindows

(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 all

28RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Denial of Service

CVE-2007-2772—doswindows

(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 all

28RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Live Support 1.21 - Admin Credential Retrieve

CVE-2007-2775—webappsphp

AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are m

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMySms 2.0 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-3300—webappsphp

PHP remote file inclusion vulnerability in sms_config/gateway.php in PhpMySms 2.0 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scout Portal Toolkit 1.4.0 - 'forumid' SQL Injection

CVE-2006-3309—webappsphp

SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module galleria 1.0b - Remote File Inclusion

CVE-2006-3396—webappsphp

PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module icontent 1.0/4.5 - Remote File Inclusion

CVE-2007-3057—webappsphp

PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS a

35RISCO

abrir ↗

Referência✓ VexDay Proof

Kartli Alisveris Sistemi 1.0 - SQL Injection

CVE-2007-3119—webappsasp

SQL injection vulnerability in news.asp in Kartli Alisveris Sistemi (aka Free-PayPal-Shopping-Cart) 1.0 allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quick.Cart 2.2 - Local/Remote File Inclusion / Remote Code Execution

CVE-2007-3138—webappsphp

Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to in

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quick.Cart 2.2 - Local/Remote File Inclusion / Remote Code Execution

CVE-2007-3139—webappsphp

config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Real Estate Classifieds - Remote File Inclusion

CVE-2007-3160—webappsphp

PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote at

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.