Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência

CVE-2026-65710

CVE-2026-65710HIGH

sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption

41RISCO

abrir ↗

Referência✓ VexDay Proof

nsGalPHP - '/includes/config.inc.php?racineTBS' Remote File Inclusion

CVE-2007-0573—webappsphp

PHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-4807

CVE-2009-4807—

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Foro Domus 2.10 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0580—webappsphp

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

EclipseBB 0.5.0 Lite - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0581—webappsphp

PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2009-4809

CVE-2009-4809—

Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

forum livre 1.0 - SQL Injection / Cross-Site Scripting

CVE-2007-0589—webappsasp

SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user pa

23RISCO

abrir ↗

Referência✓ VexDay Proof

forum livre 1.0 - SQL Injection / Cross-Site Scripting

CVE-2007-0590—webappsasp

Cross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hailboards 1.2.0 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0662—webappsphp

PHP remote file inclusion vulnerability in includes/usercp_viewprofile.php in Hailboards 1.2.0 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

ExoPHPDesk 1.2.1 - 'faq.php' SQL Injection

CVE-2007-0676—webappsphp

SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cadre PHP Framework - Remote File Inclusion

CVE-2007-0677—webappsphp

PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fullaspsite Asp Hosting Sitesi - 'tr' SQL Injection

CVE-2007-0678—webappsasp

SQL injection vulnerability in windows.asp in Fullaspsite Asp Hosting Sitesi allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyRing 4.1.3b - 'fichier' Remote File Inclusion

CVE-2007-0679—webappsphp

PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Remotesoft .NET Explorer 2.0.1 - Local Stack Overflow (PoC)

CVE-2007-0766—doswindows

Stack-based buffer overflow in Remotesoft .NET Explorer 2.0.1 allows user-assisted remote attackers to cause a denial of

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flip 2.01 final - 'previewtheme.php?inc_path' Remote File Inclusion

CVE-2007-0785—webappsphp

PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote

35RISCO

abrir ↗

Referência✓ VexDay Proof

Photo Galerie Standard 1.1 - 'view.php' SQL Injection

CVE-2007-0786—webappsphp

SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmartFTP Client 2.0.1002 - Remote Heap Overflow Denial of Service

CVE-2007-0790—doswindows

Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner.

23RISCO

abrir ↗

Referência✓ VexDay Proof

SMA-DB 0.3.9 - 'settings.php' Remote File Inclusion

CVE-2007-0797—webappsphp

PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remote

23RISCO

abrir ↗

Referência

CVE-2021-1497

CVE-2021-1497CRITICALsob ataque

Cisco HyperFlex HX Command Injection Vulnerabilities

100RISCO

abrir ↗

Referência

CVE-2022-29303

CVE-2022-29303CRITICALsob ataque

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

100RISCO

abrir ↗

Referência✓ VexDay Proof

Categories hierarchy phpBB Mod 2.1.2 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0809—webappsphp

PHP remote file inclusion vulnerability in includes/class_template.php in Categories hierarchy (aka CH or mod-CH) 2.1.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

Geeklog 2 - 'BaseView.php' Remote File Inclusion

CVE-2007-0810—webappsphp

PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board Lite 1.0.2pl3e - 'pms.php' SQL Injection

CVE-2007-0812—webappsphp

SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authentic

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightRO CMS 1.0 - 'inhalt.php' Remote File Inclusion

CVE-2007-0824—webappsphp

PHP remote file inclusion vulnerability in inhalt.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kisisel Site 2007 - 'tr' SQL Injection

CVE-2007-0826—webappsphp

SQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alibaba Alipay - Remove ActiveX Remote Code Execution

CVE-2007-0827—remotewindows

The Alibaba Alipay PTA Module ActiveX control (PTA.DLL) allows remote attackers to execute arbitrary code via a JavaScri

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Poll 2.0.5-dev - Remote Admin Session Generator

CVE-2007-0845—webappsphp

admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain admin

23RISCO

abrir ↗

Referência✓ VexDay Proof

LushiNews 1.01 - 'comments.php' SQL Injection

CVE-2007-0865—webappsphp

SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject ar

23RISCO

abrir ↗

Referência

CVE-2018-0296

CVE-2018-0296HIGHsob ataque

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remo

100RISCO

abrir ↗

Referência

CVE-2021-22986

CVE-2021-22986CRITICALsob ataqueransomware

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.