Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

Macromedia 10.1.4.20 - 'SwDir.dll' Internet Explorer Stack Overflow Denial of Service

CVE-2007-1403—doswindows

Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote

28RISCO

abrir ↗

Referência

CVE-2021-33044

CVE-2021-33044CRITICALsob ataque

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by

100RISCO

abrir ↗

Referência

CVE-2026-7385

CVE-2026-7385MEDIUM

Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure

33RISCO

abrir ↗

Referência

CVE-2023-21839

CVE-2023-21839HIGHsob ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

100RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow

CVE-2007-1709—localwindows

Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows contex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection

CVE-2007-1712—webappsasp

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

C-Arbre 0.6PR7 - 'ROOT_PATH' Remote File Inclusion

CVE-2007-1721—webappsphp

Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbit

28RISCO

abrir ↗

Referência✓ VexDay Proof

NaviCOPA Web Server 2.01 - Remote Buffer Overflow (Metasploit)

CVE-2007-1733—remotewindows

Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (

28RISCO

abrir ↗

Referência

CVE-2009-4876

CVE-2009-4876—

admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the ci

23RISCO

abrir ↗

Referência✓ VexDay Proof

Corel WordPerfect X3 13.0.0.565 - '.prs' Local Buffer Overflow

CVE-2007-1735—localwindows

Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softerra Time-Assistant 6.2 - 'inc_dir' Remote File Inclusion

CVE-2007-1787—webappsphp

Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kaqoo Auction - 'install_root' Multiple Remote File Inclusions

CVE-2007-1790—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Picture-Engine 1.2.0 - 'wall.php?cat' SQL Injection

CVE-2007-1791—webappsphp

SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module RM+Soft Gallery 1.0 - Blind SQL Injection

CVE-2007-1806—webappsphp

SQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for Xoops allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Kshop 1.17 - 'id' SQL Injection

CVE-2007-1810—webappsphp

SQL injection vulnerability in product_details.php in the Kshop 1.17 and earlier module for Xoops allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2009-4883

CVE-2009-4883—

SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Tiny Event 1.01 - 'id' SQL Injection

CVE-2007-1811—webappsphp

SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module for Xoops allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

BT-sondage 1.12 - 'gestion_sondage.php' Remote File Inclusion

CVE-2007-1812—webappsphp

PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module eCal 2.24 - 'display.php' SQL Injection

CVE-2007-1813—webappsphp

SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Core - 'viewcat.php' SQL Injection

CVE-2007-1814—webappsphp

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Library - 'viewcat.php' SQL Injection

CVE-2007-1815—webappsphp

SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2009-4889

CVE-2009-4889—

SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Tutoriais - 'viewcat.php' SQL Injection

CVE-2007-1816—webappsphp

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module MyAds Bug Fix 2.04jp - 'index.php' SQL Injection

CVE-2007-1846—webappsphp

SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBloggie 2.1.6 - Multiple SQL Injections

CVE-2007-1899—webappsphp

Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

ShoutPro 1.5.2 - 'shout.php' Remote Code Injection

CVE-2007-2141—webappsphp

Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary

35RISCO

abrir ↗

Referência✓ VexDay Proof

AjPortal2Php - 'PagePrefix' Remote File Inclusion

CVE-2007-2142—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Template Be2004-2 - 'index.php' Remote File Inclusion

CVE-2007-2143—webappsphp

PHP remote file inclusion vulnerability in index.php in the Be2004-2 template for Joomla! allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JoomlaPack 1.0.4a2 RE - 'CAltInstaller.php' Remote File Inclusion

CVE-2007-2144—webappsphp

PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE component

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cabron Connector 1.1.0-Full - Remote File Inclusion

CVE-2007-2154—webappsphp

PHP remote file inclusion vulnerability in services/samples/inclusionService.php in Cabron Connector 1.1.0 allows remote

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.