Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.448exploits catalogados

35.552CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.224VulnCheck XDB 8.649Nuclei 4.283Metasploit 3.474✓ só verificadosrecentes populares risco

22.332 exploits

Referência✓ VexDay Proof

Fuzzylime Forum 1.0 - 'low.php?topic' SQL Injection

CVE-2007-3235—webappsphp

Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência

CVE-2017-17618

CVE-2017-17618—

Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module horoscope 2.0 - Remote File Inclusion

CVE-2007-3236—webappsphp

PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to e

45RISCO

abrir ↗

Referência✓ VexDay Proof

xoops module tinycontent 1.5 - Remote File Inclusion

CVE-2007-3237—webappsphp

PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS all

35RISCO

abrir ↗

Referência

CVE-2017-17619

CVE-2017-17619—

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyInventory 2.8 - 'global.inc.php' Remote File Inclusion

CVE-2007-3270—webappsphp

PHP remote file inclusion vulnerability in Includes/global.inc.php in phpMyInventory 2.8 allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Office - MSODataSourceControl COM-object Buffer Overflow (PoC)

CVE-2007-3282—doswindows

Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of

35RISCO

abrir ↗

Referência

CVE-2017-17620

CVE-2017-17620—

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module wiwimod 0.4 - Remote File Inclusion

CVE-2007-3289—webappsphp

PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module for XOOPS allows remote

28RISCO

abrir ↗

Referência✓ VexDay Proof

LiveCMS 3.4 - 'categoria.php?cid' SQL Injection

CVE-2007-3290—webappsphp

categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) charact

23RISCO

abrir ↗

Referência✓ VexDay Proof

LiveCMS 3.4 - 'categoria.php?cid' SQL Injection

CVE-2007-3292—webappsphp

Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBill 1.2.5 - 'run_billing.php' Remote File Inclusion

CVE-2007-3306—webappsphp

PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute

35RISCO

abrir ↗

Referência

CVE-2017-17621

CVE-2017-17621—

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Solar Empire 2.9.1.1 - Blind SQL Injection / Hash Retrieve

CVE-2007-3307—webappsphp

SQL injection vulnerability in game_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

LAN Management System (LMS) 1.9.6 - Remote File Inclusion

CVE-2007-3325—webappsphp

PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remo

35RISCO

abrir ↗

Referência✓ VexDay Proof

BitchX 1.1-final - 'EXEC' Remote Command Execution

CVE-2007-3360—remotelinux

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data cont

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sun Board 1.00.00 alpha - Remote File Inclusion

CVE-2007-3370—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrar

45RISCO

abrir ↗

Referência

CVE-2026-18581

CVE-2026-18581MEDIUM

ggml-org llama.cpp Jinja Minja Template parser.cpp assertion

33RISCO

abrir ↗

Referência

CVE-2026-16261

CVE-2026-16261HIGH

Huge IT Login <= 1.0.4 - Unauthenticated Account Takeover

41RISCO

abrir ↗

Referência

CVE-2026-16042

CVE-2026-16042MEDIUM

LWS Optimize < 3.4 - Subscriber+ Cache Deletion

33RISCO

abrir ↗

Referência

CVE-2026-14817

CVE-2026-14817MEDIUM

Element Pack Elementor Addons < 8.7.13 - Contributor+ DOM-Based Stored XSS via uikit Data Attributes

33RISCO

abrir ↗

Referência✓ VexDay Proof

NCTAudioEditor2 ActiveX DLL 'NCTWMAFile2.dll 2.6.2.157' - File Write

CVE-2007-3400—remotewindows

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.

23RISCO

abrir ↗

Referência✓ VexDay Proof

b1gbb 2.24.0 - 'footer.inc.php?tfooter' Remote File Inclusion

CVE-2007-3401—webappsphp

PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary

45RISCO

abrir ↗

Referência✓ VexDay Proof

Ripe Website Manager (CMS) 0.8.9 - Remote File Inclusion

CVE-2007-3524—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to e

35RISCO

abrir ↗

Referência✓ VexDay Proof

Buddy Zone 1.5 - Multiple SQL Injections

CVE-2007-3526—webappsphp

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2007-3530

CVE-2007-3530—

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain

23RISCO

abrir ↗

Referência

CVE-2017-17622

CVE-2017-17622—

Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.

23RISCO

abrir ↗

Referência

CVE-2026-12500

CVE-2026-12500HIGH

WP Travel Engine < 6.8.2 - Unauthenticated Trip Difficulty Level Option Update

41RISCO

abrir ↗

Referência

CVE-2026-11881

CVE-2026-11881MEDIUM

Fluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time Field

33RISCO

abrir ↗

Referência

CVE-2026-11870

CVE-2026-11870MEDIUM

Hide My WP Ghost < 7.0.05 - IP Address Spoofing via Trusted Proxy Headers Leading to Protection Mechanism Bypass

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.