Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - Arbitrary File Upload

CVE-2007-0972—webappsphp

Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Connectix Boards 0.7 - 'p_skin' Multiple Vulnerabilities

CVE-2007-1254—webappsphp

SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated user

23RISCO

abrir ↗

Referência

CVE-2009-4856

CVE-2009-4856—

Cross-site scripting (XSS) vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Connectix Boards 0.7 - 'p_skin' Multiple Vulnerabilities

CVE-2007-1255—webappsphp

Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticat

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebMod 0.48 - Content-Length Remote Buffer Overflow

CVE-2007-1260—remotewindows

Stack-based buffer overflow in the connectHandle function in server.cpp in WebMod 0.48 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mani Stats Reader 1.2 - 'ipath' Remote File Inclusion

CVE-2007-1299—webappsphp

PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

MailEnable Professional/Enterprise 2.37 - 'APPEND' Remote Buffer Overflow

CVE-2007-1301—remotewindows

Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allo

28RISCO

abrir ↗

Referência✓ VexDay Proof

News-Letterman 1.1 - 'eintrag.php?sqllog' Remote File Inclusion

CVE-2007-1340—webappsphp

PHP remote file inclusion vulnerability in eintrag.php in Weltennetz News-Letterman 1.1 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.1 - 'substr_compare()' Information Leak

CVE-2007-1375—localmultiple

Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sens

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 4.4.6 - 'crack_opendict()' Local Buffer Overflow

CVE-2007-1401—localwindows

Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Macromedia 10.1.4.20 - 'SwDir.dll' Internet Explorer Stack Overflow Denial of Service

CVE-2007-1403—doswindows

Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote

28RISCO

abrir ↗

Referência

CVE-2021-33044

CVE-2021-33044CRITICALsob ataque

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by

100RISCO

abrir ↗

Referência

CVE-2026-7385

CVE-2026-7385MEDIUM

Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure

33RISCO

abrir ↗

Referência

CVE-2023-21839

CVE-2023-21839HIGHsob ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

100RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow

CVE-2007-1709—localwindows

Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows contex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection

CVE-2007-1712—webappsasp

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

C-Arbre 0.6PR7 - 'ROOT_PATH' Remote File Inclusion

CVE-2007-1721—webappsphp

Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbit

28RISCO

abrir ↗

Referência✓ VexDay Proof

NaviCOPA Web Server 2.01 - Remote Buffer Overflow (Metasploit)

CVE-2007-1733—remotewindows

Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (

28RISCO

abrir ↗

Referência

CVE-2009-4876

CVE-2009-4876—

admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the ci

23RISCO

abrir ↗

Referência✓ VexDay Proof

Corel WordPerfect X3 13.0.0.565 - '.prs' Local Buffer Overflow

CVE-2007-1735—localwindows

Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softerra Time-Assistant 6.2 - 'inc_dir' Remote File Inclusion

CVE-2007-1787—webappsphp

Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kaqoo Auction - 'install_root' Multiple Remote File Inclusions

CVE-2007-1790—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Picture-Engine 1.2.0 - 'wall.php?cat' SQL Injection

CVE-2007-1791—webappsphp

SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module RM+Soft Gallery 1.0 - Blind SQL Injection

CVE-2007-1806—webappsphp

SQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for Xoops allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Kshop 1.17 - 'id' SQL Injection

CVE-2007-1810—webappsphp

SQL injection vulnerability in product_details.php in the Kshop 1.17 and earlier module for Xoops allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2009-4883

CVE-2009-4883—

SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Tiny Event 1.01 - 'id' SQL Injection

CVE-2007-1811—webappsphp

SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module for Xoops allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

BT-sondage 1.12 - 'gestion_sondage.php' Remote File Inclusion

CVE-2007-1812—webappsphp

PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module eCal 2.24 - 'display.php' SQL Injection

CVE-2007-1813—webappsphp

SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Core - 'viewcat.php' SQL Injection

CVE-2007-1814—webappsphp

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.