Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2009-4883

CVE-2009-4883—

SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Tiny Event 1.01 - 'id' SQL Injection

CVE-2007-1811—webappsphp

SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module for Xoops allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

BT-sondage 1.12 - 'gestion_sondage.php' Remote File Inclusion

CVE-2007-1812—webappsphp

PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module eCal 2.24 - 'display.php' SQL Injection

CVE-2007-1813—webappsphp

SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Core - 'viewcat.php' SQL Injection

CVE-2007-1814—webappsphp

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Library - 'viewcat.php' SQL Injection

CVE-2007-1815—webappsphp

SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2009-4889

CVE-2009-4889—

SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Tutoriais - 'viewcat.php' SQL Injection

CVE-2007-1816—webappsphp

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module MyAds Bug Fix 2.04jp - 'index.php' SQL Injection

CVE-2007-1846—webappsphp

SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBloggie 2.1.6 - Multiple SQL Injections

CVE-2007-1899—webappsphp

Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

ShoutPro 1.5.2 - 'shout.php' Remote Code Injection

CVE-2007-2141—webappsphp

Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary

35RISCO

abrir ↗

Referência✓ VexDay Proof

AjPortal2Php - 'PagePrefix' Remote File Inclusion

CVE-2007-2142—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Template Be2004-2 - 'index.php' Remote File Inclusion

CVE-2007-2143—webappsphp

PHP remote file inclusion vulnerability in index.php in the Be2004-2 template for Joomla! allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JoomlaPack 1.0.4a2 RE - 'CAltInstaller.php' Remote File Inclusion

CVE-2007-2144—webappsphp

PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE component

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cabron Connector 1.1.0-Full - Remote File Inclusion

CVE-2007-2154—webappsphp

PHP remote file inclusion vulnerability in services/samples/inclusionService.php in Cabron Connector 1.1.0 allows remote

23RISCO

abrir ↗

Referência

CVE-2009-4978

CVE-2009-4978—

Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rezervi 0.9 - 'root' Remote File Inclusion

CVE-2007-2156—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PH

28RISCO

abrir ↗

Referência

CVE-2009-4982

CVE-2009-4982—

SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

AimStats 3.2 - 'process.php?update' Remote Code Execution

CVE-2007-2167—webappsphp

Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into confi

35RISCO

abrir ↗

Referência✓ VexDay Proof

Mozzers SubSystem final - 'subs.php' Remote Code Execution

CVE-2007-2169—webappsphp

Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.3 - '.wmv' Remote Denial of Service

CVE-2007-2180—doswindows

Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBInsta FM 0.1.4 - 'login.php' absolute_path Remote File Inclusion

CVE-2007-2181—webappsphp

PHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Ring Webring System 0.9 - SQL Injection

CVE-2007-2183—webappsphp

SQL injection vulnerability in index.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Post REvolution 0.7.0 RC 2 - 'dir' Remote File Inclusion

CVE-2007-2201—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection

CVE-2007-2211—webappsphp

SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kodak Image Viewer - TIF/TIFF Code Execution (MS07-055)

CVE-2007-2217—localwindows

Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote at

35RISCO

abrir ↗

Referência

CVE-2007-2222

CVE-2007-2222—

Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as use

35RISCO

abrir ↗

Referência

CVE-2024-13159

CVE-2024-13159CRITICALsob ataque

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

100RISCO

abrir ↗

Referência

CVE-2021-34527

CVE-2021-34527HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2016-10033

CVE-2016-10033CRITICALsob ataque

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.