Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.324exploits catalogados

37.130CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.614GitHub PoC 15.330VulnCheck XDB 9.001Nuclei 4.401Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Nitrotech 0.0.3a - Remote Code Execution

CVE-2006-6938—webappsphp

Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities

CVE-2006-6941—webappsphp

index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action

23RISCO

abrir ↗

Referência✓ VexDay Proof

DigiAffiliate 1.4 - 'id' SQL Injection

CVE-2007-0306—webappsasp

SQL injection vulnerability in visu_user.asp in Digiappz DigiAffiliate 1.4 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

BolinTech DreamFTP Server - 'USER' Remote Buffer Overflow (PoC)

CVE-2007-0338—doswindows

Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command with

23RISCO

abrir ↗

Referência✓ VexDay Proof

ThWboard 3.0b2.84-php5 - SQL Injection / Code Execution

CVE-2007-0340—webappsphp

SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Help Workshop 4.03.0002 - '.cnt' Local Buffer Overflow

CVE-2007-0352—localwindows

Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitr

35RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX 10.4.8 - SLP Daemon Service Registration Buffer Overflow (PoC)

CVE-2007-0355—dososx

Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flip 2.01 final - 'previewtheme.php?inc_path' Remote File Inclusion

CVE-2007-0785—webappsphp

PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote

35RISCO

abrir ↗

Referência✓ VexDay Proof

WebMatic 2.6 - 'index_album.php' Remote File Inclusion

CVE-2007-0839—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index/index_album.php in Valarsoft WebMatic 2.6 allow remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

LushiWarPlaner 1.0 - 'register.php' SQL Injection

CVE-2007-0864—webappsphp

SQL injection vulnerability in register.php in LushiWarPlaner 1.0 allows remote attackers to inject arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Axigen 2.0.0b1 - Remote Denial of Service (2)

CVE-2007-0887—doslinux

axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial

28RISCO

abrir ↗

Referência✓ VexDay Proof

News Bin Pro 4.32 - Article Grabbing Remote Unicode Buffer Overflow

CVE-2007-1569—doswindows

Stack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of service or execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

GeBlog 0.1 (Windows) - GLOBALS[tplname] Local File Inclusion

CVE-2007-1577—webappsphp

Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mercur IMAPD 5.00.14 (Windows x86) - Remote Denial of Service

CVE-2007-1578—doswindows_x86

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mercur Messaging 2005 (Windows 2000 SP4) - IMAP 'Subscribe' Remote Overflow

CVE-2007-1579—remotewindows

Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSC

35RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Tiny Event 1.01 - 'id' SQL Injection

CVE-2007-1811—webappsphp

SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module for Xoops allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

BT-sondage 1.12 - 'gestion_sondage.php' Remote File Inclusion

CVE-2007-1812—webappsphp

PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Tutoriais - 'viewcat.php' SQL Injection

CVE-2007-1816—webappsphp

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

CodeBB 1.0 Beta 2 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-1839—webappsphp

Multiple PHP remote file inclusion vulnerabilities in CodeBB 1.1b3 and earlier allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quick and Dirty Blog (qdblog) 0.4 - SQL Injection / Local File Inclusion

CVE-2007-2305—webappsphp

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, a

23RISCO

abrir ↗

Referência✓ VexDay Proof

CodeWand phpBrowse - 'site_path' Remote File Inclusion

CVE-2007-2345—webappsphp

PHP remote file inclusion vulnerability in include/include_stream.inc.php in CodeWand phpBrowse allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

burnCMS 0.2 - 'root' Remote File Inclusion

CVE-2007-2364—webappsphp

Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin mygallery 1.4b4 - Remote File Inclusion

CVE-2007-2426—webappsphp

PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin fo

35RISCO

abrir ↗

Referência✓ VexDay Proof

Sun Board 1.00.00 alpha - Remote File Inclusion

CVE-2007-3370—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrar

45RISCO

abrir ↗

Referência✓ VexDay Proof

b1gbb 2.24.0 - 'footer.inc.php?tfooter' Remote File Inclusion

CVE-2007-3401—webappsphp

PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary

45RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Directory Script - 'Directory.php?cat_id' SQL Injection

CVE-2007-3809—webappsphp

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Realtor 747 - 'index.php?categoryId' SQL Injection

CVE-2007-3810—webappsphp

SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

eSyndiCat Directory Software - Multiple SQL Injections

CVE-2007-3811—webappsphp

Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow

CVE-2007-3876—localosx

Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pictures Rating - 'index.php?msgid' SQL Injection

CVE-2007-3881—webappsphp

SQL injection vulnerability in index.php in Pictures Rating (Picture Rating) allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.