Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

DVD X Player 4.1 Professional - '.PLF' File Buffer Overflow

CVE-2007-3068—localwindows

Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF

50RISCO

abrir ↗

Referência✓ VexDay Proof

SNMPc 7.0.18 - Remote Denial of Service (Metasploit)

CVE-2007-3098—doswindows

The SNMPc Server (crserv.exe) process in Castle Rock Computing SNMPc before 7.0.19 allows remote attackers to cause a de

23RISCO

abrir ↗

Referência✓ VexDay Proof

X.Org xorg-x11-xfs 1.0.2-3.1 - Local Race Condition

CVE-2007-3103—locallinux

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quick.Cart 2.2 - Local/Remote File Inclusion / Remote Code Execution

CVE-2007-3139—webappsphp

config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow

CVE-2007-3147—remotewindows

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows

50RISCO

abrir ↗

Referência✓ VexDay Proof

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow (2)

CVE-2007-3148—remotewindows

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows

28RISCO

abrir ↗

Referência✓ VexDay Proof

Ace-FTP Client 1.24a - Remote Buffer Overflow (PoC)

CVE-2007-3161—doswindows

Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vivotek Motion Jpeg Control - 'MjpegDecoder.dll 2.0.0.13' Remote Overflow

CVE-2007-3167—remotewindows

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 a

23RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component - Unsafe Method

CVE-2007-3168—remotewindows

A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions befo

23RISCO

abrir ↗

Referência✓ VexDay Proof

JBlog 1.0 - Create / Delete Admin Authentication Bypass

CVE-2007-3973—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script o

23RISCO

abrir ↗

Referência✓ VexDay Proof

bwired - 'index.php?newsID' SQL Injection

CVE-2007-3976—webappsphp

SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the new

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 4.4.7/5.2.3 - MySQL/MySQLi 'Safe_Mode' Bypass

CVE-2007-3997—localmultiple

The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.3 - 'PHP_gd2.dll' imagepsloadfont Local Buffer Overflow (PoC)

CVE-2007-4033—doswindows

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent at

28RISCO

abrir ↗

Referência

CVE-2010-0249

CVE-2010-0249HIGHsob ataque

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and S

100RISCO

abrir ↗

Referência✓ VexDay Proof

Adult Directory - 'cat_id' SQL Injection

CVE-2007-4056—webappsphp

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPNews 0.93 - 'format_menue' Remote File Inclusion

CVE-2007-4232—webappsphp

PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote att

35RISCO

abrir ↗

Referência✓ VexDay Proof

CHILKAT ASP String - 'CkString.dll 1.1 SaveToFile()' Insecure Method

CVE-2007-4252—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String

23RISCO

abrir ↗

Referência✓ VexDay Proof

Envolution 1.1.0 - 'topic' SQL Injection

CVE-2007-4253—webappsphp

SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

YNP Portal System 2.2.0 - 'showpage.cgi p' Remote File Disclosure

CVE-2007-4256—webappscgi

Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary f

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.ply' Local Buffer Overflow

CVE-2007-4257—localwindows

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.spr' Local Buffer Overflow

CVE-2007-4257—localwindows

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Pub Site Directory - 'Directory.php?cat' SQL Injection

CVE-2007-4258—webappsphp

SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - SQL Injection

CVE-2007-4312—webappsphp

SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft DXMedia SDK 6 - 'SourceUrl' ActiveX Remote Code Execution

CVE-2007-4336—remotewindows

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX cont

35RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Webring Website Script - 'category.php?cat' SQL Injection

CVE-2007-4362—webappsphp

SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access 7.0 Upload Module - 'inotes6.dll' Remote Buffer Overflow

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access Upload Module - 'dwa7w.dll' Remote Buffer Overflow

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access Upload Module - Overwrite (SEH)

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Classifieds PLUS - 'id' SQL Injection

CVE-2007-5122—webappsphp

SQL injection vulnerability in store_info.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Novus 1.0 - 'notas.asp?nota_id' SQL Injection

CVE-2007-5123—webappsasp

SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.