Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

Ask.com/AskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow

CVE-2007-5107—remotewindows

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media

50RISCO

abrir ↗

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5110—remotewindows

Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

EB Design Pty Ltd - 'EBCRYPT.dll 2.0' Multiple Remote Vulnerabilities

CVE-2007-5111—remotewindows

A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Image 1.2 - Multiple Remote File Inclusions

CVE-2007-5697—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHP Image 1.2 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sony CONNECT Player 4.x - '.m3u' Local Stack Overflow

CVE-2007-5709—localwindows

Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code

28RISCO

abrir ↗

Referência✓ VexDay Proof

Flatnuke 3 - Remote Cookie Manipulation / Privilege Escalation

CVE-2007-5771—webappsphp

Flatnuke 3 (aka FlatnuX) allows remote attackers to obtain administrative access via a myforum%00 cookie.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flatnuke 3 - Remote Command Execution / Privilege Escalation

CVE-2007-5773—webappsphp

Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

DM Guestbook 0.4.1 - Multiple Local File Inclusions

CVE-2007-5821—webappsphp

Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

GuppY 4.6.3 - 'index.php?selskin' Remote File Inclusion

CVE-2007-5844—webappsphp

Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência

CVE-2010-0456

CVE-2010-0456—

SQL injection vulnerability in the indianpulse Game Server (com_gameserver) component 1.2 for Joomla! allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

GuppY 4.5.16 - Remote Command Execution

CVE-2007-5845—webappsphp

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

GuppY 4.6.3 - 'index.php?selskin' Remote File Inclusion

CVE-2007-5845—webappsphp

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência

CVE-2010-0457

CVE-2010-0457—

SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Message Board 2.2.1c - SQL Injection

CVE-2007-5887—webappsasp

SQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2010-0457

CVE-2010-0457—

SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

jPORTAL 2 - 'mailer.php' SQL Injection

CVE-2007-5912—webappsphp

SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

vsftpd 2.0.5 - 'CWD' (Authenticated) Remote Memory Consumption

CVE-2007-5962—doslinux

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 throug

28RISCO

abrir ↗

Referência

CVE-2010-0458

CVE-2010-0458—

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

patBBcode 1.0 - 'bbcodeSource.php' Remote File Inclusion

CVE-2007-5995—webappsphp

PHP remote file inclusion vulnerability in examples/patExampleGen/bbcodeSource.php in patBBcode 1.0 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2010-0461

CVE-2010-0461—

SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Link Directory Script - SQL Injection

CVE-2007-5996—webappsphp

SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Banner Exchange Network Script 1.0 - SQL Injection

CVE-2007-5997—webappsphp

SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authentica

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Ad Management plus Script 1 - SQL Injection

CVE-2007-5998—webappsphp

SQL injection vulnerability in ads.php in Softbiz Ad Management plus Script 1 allows remote authenticated users to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Auctions Script - 'product_desc.php' SQL Injection

CVE-2007-5999—webappsphp

SQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Toko Instan 7.6 - Multiple SQL Injections

CVE-2007-6004—webappsphp

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component juser 1.0.14 - Remote File Inclusion

CVE-2007-6038—webappsphp

PHP remote file inclusion vulnerability in xajax_functions.php in the JUser (com_juser) 1.0.14 component for Joomla! all

28RISCO

abrir ↗

Referência✓ VexDay Proof

IceBB 1.0-rc6 - Remote Database Authentication Details

CVE-2007-6083—webappsphp

SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

HotScripts Clone Script - SQL Injection

CVE-2007-6084—webappsphp

SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2022-35914

CVE-2022-35914CRITICALsob ataque

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RISCO

abrir ↗

Referência

CVE-2020-1472

CVE-2020-1472MEDIUMsob ataqueransomware

Netlogon Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.