Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

SonicMailer Pro 3.2.3 - 'index.php' SQL Injection

CVE-2007-1425—webappsphp

SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft DNS Server - Dynamic DNS Update/Change

CVE-2007-1644—remotewindows

The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients i

35RISCO

abrir ↗

Referência✓ VexDay Proof

0irc-client 1345 build20060823 - Denial of Service

CVE-2007-1648—doswindows

0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash) by operating an IRC se

23RISCO

abrir ↗

Referência✓ VexDay Proof

Philex 0.2.3 - Remote File Inclusion / File Disclosure

CVE-2007-1698—webappsphp

download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sen

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module Flatmenu 1.07 - Remote File Inclusion

CVE-2007-1702—webappsphp

PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component RWCards 2.4.3 - SQL Injection

CVE-2007-1703—webappsphp

SQL injection vulnerability in index.php in the RWCards (com_rwcards) 2.4.3 and earlier component for Joomla! allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Trade 2 - 'catid' SQL Injection

CVE-2007-1705—webappsasp

SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2017-8917

CVE-2017-8917—

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci

60RISCO

abrir ↗

Referência

CVE-2017-7269

CVE-2017-7269CRITICALsob ataque

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in

100RISCO

abrir ↗

Referência

CVE-2025-34103

CVE-2025-34103CRITICAL

WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgi

63RISCO

abrir ↗

Referência✓ VexDay Proof

eWebquiz 8 - 'eWebQuiz.asp' SQL Injection

CVE-2007-1706—webappsasp

SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pathos CMS 0.92-2 - 'warn.php' Remote File Inclusion

CVE-2007-1907—webappsphp

PHP remote file inclusion vulnerability in warn.php in Pathos Content Management System (CMS) 0.92-2 allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP121 Instant Messenger 2.2 - Local File Inclusion

CVE-2007-1908—webappsphp

PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2009-4906

CVE-2009-4906—

Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Word 2007 - Multiple Vulnerabilities

CVE-2007-1910—doswindows

Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application cr

28RISCO

abrir ↗

Referência

CVE-2009-4906

CVE-2009-4906—

Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Beryo 2.0 - 'downloadpic.php?chemin' Remote File Disclosure

CVE-2007-1929—webappsphp

Directory traversal vulnerability in downloadpic.php in Beryo 2.0, and possibly other versions including 2.4, allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmodCMS 2.10 - Slownik ssid SQL Injection

CVE-2007-1931—webappsphp

SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

PcP-Guestbook 3.0 - 'lang' Local File Inclusion

CVE-2007-1933—webappsphp

Multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 allow remote attackers to include and execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scorp Book 1.0 - 'smilies.php?config' Remote File Inclusion

CVE-2007-1937—webappsphp

PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência

CVE-2009-4908

CVE-2009-4908—

Multiple cross-site scripting (XSS) vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or HT

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Rha7 Downloads 1.0 - 'visit.php' SQL Injection

CVE-2007-1960—webappsphp

SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.3 - Remote Code Execution

CVE-2007-1963—webappsphp

SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and

23RISCO

abrir ↗

Referência

CVE-2009-4925

CVE-2009-4925—

Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16,

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module WF-Section 1.01 - 'articleId' SQL Injection

CVE-2007-1974—webappsphp

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module XFsection 1.07 - 'articleId' Blind SQL Injection

CVE-2007-1974—webappsphp

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Zmagazine 1.0 - 'print.php' SQL Injection

CVE-2007-1974—webappsphp

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Module Arcade 1.0 - 'cid' SQL Injection

CVE-2007-1978—webappsphp

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module PopnupBlog 2.52 - 'postid' Blind SQL Injection

CVE-2007-1979—webappsphp

SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Module topliste 1.0 - 'cid' SQL Injection

CVE-2007-1980—webappsphp

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute ar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.