Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.324exploits catalogados

37.130CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.614GitHub PoC 15.330VulnCheck XDB 9.001Nuclei 4.401Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Jakarta Slide 2.1 RC1 - Remote File Disclosure

CVE-2007-5731—remotemultiple

Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vortex Portal 1.0.42 - Remote File Inclusion

CVE-2007-5842—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary P

35RISCO

abrir ↗

Referência✓ VexDay Proof

jPORTAL 2 - 'mailer.php' SQL Injection

CVE-2007-5912—webappsphp

SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe Shockwave - 'ShockwaveVersion()' Stack Overflow (PoC)

CVE-2007-5941—doswindows

Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a den

35RISCO

abrir ↗

Referência✓ VexDay Proof

skyportal vrc6 - Multiple Vulnerabilities

CVE-2007-6078—webappsphp

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via uns

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sciurus Hosting Panel - Remote Code Injection

CVE-2007-6082—webappsphp

Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPCOIN 1.2.3 - 'session_set.php' Remote File Inclusion

CVE-2006-4424—webappsphp

PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ay System CMS 2.6 - 'main.php' Remote File Inclusion

CVE-2006-4440—webappsphp

PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! / Mambo Component rsgallery 2.0b5 - 'catid' SQL Injection

CVE-2007-6362—webappsphp

SQL injection vulnerability in index.php in the RSGallery (com_rsgallery) 2.0 beta 5 and earlier component for Mambo and

23RISCO

abrir ↗

Referência✓ VexDay Proof

SineCMS 2.3.4 - Calendar SQL Injection

CVE-2007-6366—webappsphp

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

SH-News 3.0 - 'comments.php' SQL Injection

CVE-2007-6391—webappsphp

SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ace Image Hosting Script - 'id' SQL Injection

CVE-2007-6393—webappsphp

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flat PHP Board 1.2 - Multiple Vulnerabilities

CVE-2007-6399—webappsphp

index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current use

23RISCO

abrir ↗

Referência✓ VexDay Proof

eSyndiCat Link Exchange Script 2005-2006 - SQL Injection

CVE-2007-6543—webappsphp

SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

CVE-2007-6544—webappsphp

Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

TeamCalPro 3.1.000 - Multiple Local/Remote File Inclusions

CVE-2007-6553—webappsphp

Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion

CVE-2007-6555—webappsphp

PHP remote file inclusion vulnerability in modules/mod_pxt_latest.php in the mosDirectory (com_directory) 2.3.2 componen

23RISCO

abrir ↗

Referência✓ VexDay Proof

zBlog 1.2 - SQL Injection

CVE-2007-6577—webappsphp

Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

1024 CMS 1.4.2 - Local File Inclusion / Blind SQL Injection

CVE-2008-1911—webappsphp

SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magic_quotes_gpc is disabled

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP ZLink 0.3 - 'go.php' SQL Injection

CVE-2007-6578—webappsphp

SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wallpaper Site 1.0.09 - 'category.php' SQL Injection

CVE-2007-6580—webappsphp

Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

1024 CMS 1.3.1 - Local File Inclusion / SQL Injection

CVE-2007-6584—webappsphp

Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary l

23RISCO

abrir ↗

Referência✓ VexDay Proof

NmnNewsletter 1.0.7 - 'output' Remote File Inclusion

CVE-2007-6585—webappsphp

PHP remote file inclusion vulnerability in confirmUnsubscription.php in NmnNewsletter 1.0.7 allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

SkyFex Client 1.0 - ActiveX 'Start()' Method Remote Stack Overflow

CVE-2007-6605—doswindows

Buffer overflow in a certain ActiveX control in SkyFexClient.ocx 1.0.2.77 in SkyFex Client 1.0 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

AlkalinePHP 0.80.00 Beta - 'thread.php' SQL Injection

CVE-2008-2395—webappsphp

SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

FicHive 1.0 - 'category' Blind SQL Injection

CVE-2008-2416—webappsphp

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZenPhoto 1.1.3 - 'rss.php?albumnr' SQL Injection

CVE-2007-6666—webappsphp

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyPHP Forum 3.0 (Final) - Multiple SQL Injections

CVE-2007-6667—webappsphp

SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Site@School 2.4.10 - Blind SQL Injection

CVE-2008-0129—webappsphp

SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

emagiC CMS.Net 4.0 - 'emc.asp' SQL Injection

CVE-2007-5783—webappsasp

SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.