Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

Particle Gallery 1.0.1 - SQL Injection

CVE-2007-3065—webappsphp

SQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

DVD X Player 4.1 Professional - '.PLF' File Buffer Overflow

CVE-2007-3068—localwindows

Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF

50RISCO

abrir ↗

Referência✓ VexDay Proof

SNMPc 7.0.18 - Remote Denial of Service (Metasploit)

CVE-2007-3098—doswindows

The SNMPc Server (crserv.exe) process in Castle Rock Computing SNMPc before 7.0.19 allows remote attackers to cause a de

23RISCO

abrir ↗

Referência✓ VexDay Proof

X.Org xorg-x11-xfs 1.0.2-3.1 - Local Race Condition

CVE-2007-3103—locallinux

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quick.Cart 2.2 - Local/Remote File Inclusion / Remote Code Execution

CVE-2007-3139—webappsphp

config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow

CVE-2007-3147—remotewindows

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows

50RISCO

abrir ↗

Referência✓ VexDay Proof

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow (2)

CVE-2007-3148—remotewindows

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows

28RISCO

abrir ↗

Referência✓ VexDay Proof

Ace-FTP Client 1.24a - Remote Buffer Overflow (PoC)

CVE-2007-3161—doswindows

Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vivotek Motion Jpeg Control - 'MjpegDecoder.dll 2.0.0.13' Remote Overflow

CVE-2007-3167—remotewindows

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 a

23RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component - Unsafe Method

CVE-2007-3168—remotewindows

A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions befo

23RISCO

abrir ↗

Referência✓ VexDay Proof

EnjoySAP ActiveX rfcguisink.rfcguisink.1 - Remote Heap Overflow (PoC)

CVE-2007-3607—doswindows

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denia

23RISCO

abrir ↗

Referência✓ VexDay Proof

EnjoySAP ActiveX kweditcontrol.kwedit.1 - Remote Stack Overflow (PoC)

CVE-2007-3608—doswindows

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certai

23RISCO

abrir ↗

Referência✓ VexDay Proof

EnjoySAP ActiveX rfcguisink.rfcguisink.1 - Remote Heap Overflow (PoC)

CVE-2007-3608—doswindows

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certai

23RISCO

abrir ↗

Referência✓ VexDay Proof

eMeeting Online Dating Software 5.2 - SQL Injection

CVE-2007-3609—webappsphp

Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPVID 0.9.9 - 'categories_type.php' SQL Injection

CVE-2007-3610—webappsphp

SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

AsteriDex 3.0 - 'callboth.php' Remote Code Execution

CVE-2007-3621—webappsphp

Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

HP Digital Imaging 'hpqvwocx.dll 2.1.0.556' - 'SaveToFile()' File Write

CVE-2007-3649—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Dig

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aigaion 1.3.3 - 'topic topic_id' SQL Injection

CVE-2007-3683—webappsphp

SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mail Machine 3.989 - Local File Inclusion

CVE-2007-3702—webappsphp

Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

PsNews 1.1 - 'show.php?newspath' Local File Inclusion

CVE-2007-3772—webappsphp

Directory traversal vulnerability in news/show.php in PsNews 1.1 allows remote attackers to include and execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Traffic Stats - 'referralUrl.php?offset' SQL Injection

CVE-2007-3840—webappsphp

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Data Dynamics ActiveBar - ActiveX 'actbar3.ocx 3.1' Insecure Methods

CVE-2007-3883—remotewindows

The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow

CVE-2007-3901—remotewindows

Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for

50RISCO

abrir ↗

Referência✓ VexDay Proof

A-shop 0.70 - Remote File Deletion

CVE-2007-3937—webappsasp

Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Explorer - '.GIF' Image Denial of Service

CVE-2007-3958—doswindows

Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certa

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 'FFI' Extension 5.0.5 - 'Safe_mode' Local Bypass

CVE-2007-4528—localwindows

The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode restrictions, which allows context

23RISCO

abrir ↗

Referência✓ VexDay Proof

NVR SP2 2.0 'nvUtility.dll 1.0.14.0' - 'SaveXMLFile()' Insecure Method

CVE-2007-4583—remotewindows

Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Links MOD 1.2.2 - SQL Injection

CVE-2007-4653—webappsphp

SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

OtsTurntables 1.00 - '.m3u' Local Buffer Overflow

CVE-2007-4734—localwindows

Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a lon

23RISCO

abrir ↗

Referência✓ VexDay Proof

CKGold Shopping Cart 2.0 - 'category.php' Blind SQL Injection

CVE-2007-4736—webappsphp

SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.