Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência✓ VexDay Proof

PHP 5.2.3 - 'PHP_gd2.dll' imagepsloadfont Local Buffer Overflow (PoC)

CVE-2007-4033—doswindows

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent at

28RISCO

abrir ↗

Referência

CVE-2010-0249

CVE-2010-0249HIGHsob ataque

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and S

100RISCO

abrir ↗

Referência✓ VexDay Proof

Adult Directory - 'cat_id' SQL Injection

CVE-2007-4056—webappsphp

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPNews 0.93 - 'format_menue' Remote File Inclusion

CVE-2007-4232—webappsphp

PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote att

35RISCO

abrir ↗

Referência✓ VexDay Proof

CHILKAT ASP String - 'CkString.dll 1.1 SaveToFile()' Insecure Method

CVE-2007-4252—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String

23RISCO

abrir ↗

Referência✓ VexDay Proof

Envolution 1.1.0 - 'topic' SQL Injection

CVE-2007-4253—webappsphp

SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

YNP Portal System 2.2.0 - 'showpage.cgi p' Remote File Disclosure

CVE-2007-4256—webappscgi

Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary f

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.ply' Local Buffer Overflow

CVE-2007-4257—localwindows

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.spr' Local Buffer Overflow

CVE-2007-4257—localwindows

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Pub Site Directory - 'Directory.php?cat' SQL Injection

CVE-2007-4258—webappsphp

SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - SQL Injection

CVE-2007-4312—webappsphp

SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft DXMedia SDK 6 - 'SourceUrl' ActiveX Remote Code Execution

CVE-2007-4336—remotewindows

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX cont

35RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Webring Website Script - 'category.php?cat' SQL Injection

CVE-2007-4362—webappsphp

SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access 7.0 Upload Module - 'inotes6.dll' Remote Buffer Overflow

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access Upload Module - 'dwa7w.dll' Remote Buffer Overflow

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access Upload Module - Overwrite (SEH)

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 'FFI' Extension 5.0.5 - 'Safe_mode' Local Bypass

CVE-2007-4528—localwindows

The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode restrictions, which allows context

23RISCO

abrir ↗

Referência✓ VexDay Proof

NVR SP2 2.0 'nvUtility.dll 1.0.14.0' - 'SaveXMLFile()' Insecure Method

CVE-2007-4583—remotewindows

Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Links MOD 1.2.2 - SQL Injection

CVE-2007-4653—webappsphp

SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

OtsTurntables 1.00 - '.m3u' Local Buffer Overflow

CVE-2007-4734—localwindows

Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a lon

23RISCO

abrir ↗

Referência✓ VexDay Proof

CKGold Shopping Cart 2.0 - 'category.php' Blind SQL Injection

CVE-2007-4736—webappsphp

SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMytourney - 'menu.php' Remote File Inclusion

CVE-2007-4757—webappsphp

PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP cod

35RISCO

abrir ↗

Referência

CVE-2010-0317

CVE-2010-0317—

Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumptio

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Basic Enterprise 6.0 SP6 - Code Execution

CVE-2007-4776—localwindows

Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to ex

50RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual FoxPro 6.0 - FPOLE.OCX 6.0.8450.0 Remote (PoC)

CVE-2007-4790—doswindows

Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the

35RISCO

abrir ↗

Referência✓ VexDay Proof

GlobalLink 2.7.0.8 - 'glItemCom.dll SetInfo()' Heap Overflow

CVE-2007-4802—remotewindows

Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via (1) a lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

GlobalLink 2.7.0.8 - 'glitemflat.dll SetClientInfo()' Heap Overflow

CVE-2007-4802—remotewindows

Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via (1) a lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

AtomixMP3 2.3 - '.pls' Local Buffer Overflow

CVE-2007-4803—localwindows

Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in fil

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Studio 6.0 - 'VBTOVSI.dll 1.0.0.0' File Overwrite

CVE-2007-4890—remotewindows

Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1

28RISCO

abrir ↗

Referência✓ VexDay Proof

X-Cart - Multiple Remote File Inclusions

CVE-2007-4907—webappsphp

Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.