Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados
35.607CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/user_catelog_password.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/user_email.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/user_extend.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/user_membership_password.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Edit-X - 'Edit_Address.php' Remote File Inclusion
CVE-2007-0190—webappsphp09 jan 2007
PHP remote file inclusion vulnerability in edit_address.php in edit-x ecommerce allows remote attackers to execute arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.8 - Apple Finder DMG Volume Name Memory Corruption (PoC)
CVE-2007-0197—dososx09 jan 2007
Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly e
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MediaWiki 1.x - 'AJAX index.php' Cross-Site Scripting
CVE-2007-0177—webappsphp09 jan 2007
Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/delete_member.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/index.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/list_members.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/membership_pricing.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/send_email.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/include/config.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/include/db_config.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/add_category.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/add_news.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/change_catalog_template.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/couple_milestone.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/admin_password.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/admin_paypal_email.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/admin/approve_member.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sun Solaris 9 - RPC Request Denial of Service
CVE-2007-0165—dossolaris09 jan 2007
Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash)
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/logout.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/register.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Magic Photo Storage Website - '/user/upload_photo.php?_config[site_path]' Remote File Inclusion
CVE-2007-0182—webappsphp09 jan 2007
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Opera 9.10 - '.jpg' Image DHT Marker Heap Corruption
CVE-2007-0126—dosmultiple08 jan 2007
Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an inval
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
HP (Multiple Products) - PML Driver HPZ12 Privilege Escalation
CVE-2007-0161—localwindows08 jan 2007
The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Application Enhancer (APE) 2.0.2 - Local Privilege Escalation
CVE-2007-0162—localosx08 jan 2007
Unsanity Application Enhancer (APE) 2.0.2 installs with insecure permissions for the (1) ApplicationEnhancer binary and
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Packeteer PacketShaper 8.0 - Multiple Buffer Overflow (Denial of Service) (PoC) Vulnerabilities
CVE-2007-0113—doshardware08 jan 2007
Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Berlios GPSD 2.7 - Remote Format String (Metasploit)
CVE-2004-1388—remotelinux08 jan 2007
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7
50RISCO
abrir ↗
← anteriorpágina 553 / 816próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.