Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

InoutMailingListManager 3.1 - Remote Command Execution

CVE-2007-2004—webappsphp

Multiple SQL injection vulnerabilities in InoutMailingListManager 3.1 and earlier allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

pl-PHP Beta 0.9 - Multiple Vulnerabilities

CVE-2007-2006—webappsphp

Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

pl-PHP Beta 0.9 - Multiple Vulnerabilities

CVE-2007-2008—webappsphp

Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mosmedia 1.0.8 - Remote File Inclusion

CVE-2007-2043—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) 1.08 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module Weather - 'absolute_path' Remote File Inclusion

CVE-2007-2044—webappsphp

PHP remote file inclusion vulnerability in mod_weather.php in the Antonis Ventouris Weather module for Mambo and Joomla!

23RISCO

abrir ↗

Referência✓ VexDay Proof

ShoutPro 1.5.2 - 'shout.php' Remote Code Injection

CVE-2007-2141—webappsphp

Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary

35RISCO

abrir ↗

Referência✓ VexDay Proof

AjPortal2Php - 'PagePrefix' Remote File Inclusion

CVE-2007-2142—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Template Be2004-2 - 'index.php' Remote File Inclusion

CVE-2007-2143—webappsphp

PHP remote file inclusion vulnerability in index.php in the Be2004-2 template for Joomla! allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JoomlaPack 1.0.4a2 RE - 'CAltInstaller.php' Remote File Inclusion

CVE-2007-2144—webappsphp

PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE component

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cabron Connector 1.1.0-Full - Remote File Inclusion

CVE-2007-2154—webappsphp

PHP remote file inclusion vulnerability in services/samples/inclusionService.php in Cabron Connector 1.1.0 allows remote

23RISCO

abrir ↗

Referência

CVE-2009-4978

CVE-2009-4978—

Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rezervi 0.9 - 'root' Remote File Inclusion

CVE-2007-2156—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PH

28RISCO

abrir ↗

Referência

CVE-2009-4982

CVE-2009-4982—

SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

AimStats 3.2 - 'process.php?update' Remote Code Execution

CVE-2007-2167—webappsphp

Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into confi

35RISCO

abrir ↗

Referência✓ VexDay Proof

Mozzers SubSystem final - 'subs.php' Remote Code Execution

CVE-2007-2169—webappsphp

Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.3 - '.wmv' Remote Denial of Service

CVE-2007-2180—doswindows

Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBInsta FM 0.1.4 - 'login.php' absolute_path Remote File Inclusion

CVE-2007-2181—webappsphp

PHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Ring Webring System 0.9 - SQL Injection

CVE-2007-2183—webappsphp

SQL injection vulnerability in index.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Post REvolution 0.7.0 RC 2 - 'dir' Remote File Inclusion

CVE-2007-2201—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection

CVE-2007-2211—webappsphp

SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kodak Image Viewer - TIF/TIFF Code Execution (MS07-055)

CVE-2007-2217—localwindows

Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote at

35RISCO

abrir ↗

Referência

CVE-2007-2222

CVE-2007-2222—

Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as use

35RISCO

abrir ↗

Referência

CVE-2024-13159

CVE-2024-13159CRITICALsob ataque

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

100RISCO

abrir ↗

Referência

CVE-2021-34527

CVE-2021-34527HIGHsob ataqueransomware

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2016-10033

CVE-2016-10033CRITICALsob ataque

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RISCO

abrir ↗

Referência

CVE-2021-47981

CVE-2021-47981MEDIUM

Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form

33RISCO

abrir ↗

Referência

CVE-2020-13927

CVE-2020-13927CRITICALsob ataque

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but th

100RISCO

abrir ↗

Referência

CVE-2020-13927

CVE-2020-13927CRITICALsob ataque

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but th

100RISCO

abrir ↗

Referência

CVE-2026-1184

CVE-2026-1184MEDIUM

Deserialization of Untrusted Data in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-1322

CVE-2026-1322MEDIUM

Business Logic Errors in GitLab

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.