Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.853exploits catalogados

39.383CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9.651Nuclei 4.478Metasploit 3.523✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Jadu CMS for Government - 'recruit_details.php' SQL Injection

CVE-2008-5988—webappsphp

SQL injection vulnerability in scripts/recruit_details.php in Jadu CMS for Government allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

SG Real Estate Portal 2.0 - Insecure Cookie Handling

CVE-2008-6009—webappsphp

SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xero Portal - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0561—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP co

28RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Video Share Enterprise 4.5.1 - 'UID' SQL Injection

CVE-2008-3386—webappsphp

SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Tech Article 1.x - SQL Injection

CVE-2008-6050—webappsphp

SQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Daily Message 1.0.3 - 'id' SQL Injection

CVE-2008-6076—webappsphp

SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scriptsez Mini Hosting Panel - 'members.php' Local File Inclusion

CVE-2008-6090—webappsphp

Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

BMForum 5.6 - 'tagname' SQL Injection

CVE-2008-6091—webappsphp

SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX Browser Statistics 2.0 - Remote File Inclusion

CVE-2008-3402—webappsphp

Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics (HBS) 2.0 allow remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP NEWS 3.0 - 'news_detail.asp' SQL Injection

CVE-2007-0566—webappsasp

SQL injection vulnerability in news_detail.asp in ASP NEWS 3 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Drunken:Golem Portal 0.5.1 Alpha 2 - Remote File Inclusion

CVE-2007-0572—webappsphp

PHP remote file inclusion vulnerability in include/irc/phpIRC.php in Drunken:Golem Gaming Portal 0.5.1 Alpha 2 and earli

23RISCO

abrir ↗

Referência✓ VexDay Proof

nsGalPHP - '/includes/config.inc.php?racineTBS' Remote File Inclusion

CVE-2007-0573—webappsphp

PHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual Path 1.0 - '/vp/configure.php' Remote File Inclusion

CVE-2007-0591—webappsphp

PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

CVE-2008-3400—webappsphp

XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, whic

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pligg 9.9.5b - Arbitrary File Upload / SQL Injection

CVE-2008-5739—webappsphp

SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

BulletProof FTP Client 2.63 - Local Heap Overflow (PoC)

CVE-2008-5753—doswindows

Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

OwenPoll 1.0 - Insecure Cookie Handling

CVE-2008-6143—webappsphp

OwenPoll 1.0 allows remote attackers to bypass authentication and obtain administrative access via a modified account na

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Classified - 'ID' SQL Injection

CVE-2008-6150—webappsasp

SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cadre PHP Framework - Remote File Inclusion

CVE-2007-0677—webappsphp

PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

miniPortail 2.2 - Cross-Site Scripting / Local File Inclusion

CVE-2008-6168—webappsphp

Cross-site scripting (XSS) vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

NewLife Blogger 3.0 - Insecure Cookie Handling / SQL Injection

CVE-2008-6180—webappsphp

SQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBB Plugin Custom Pages 1.0 - SQL Injection

CVE-2008-6198—webappsphp

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard (MyBB) allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

SazCart 1.5 - 'cart.php' Remote File Inclusion

CVE-2006-5727—webappsphp

PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

RealVNC Windows Client 4.1.2 - Remote Denial of Service Crash (PoC)

CVE-2008-3493—doswindows

vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service (application cras

23RISCO

abrir ↗

Referência✓ VexDay Proof

Categories hierarchy phpBB Mod 2.1.2 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-0809—webappsphp

PHP remote file inclusion vulnerability in includes/class_template.php in Categories hierarchy (aka CH or mod-CH) 2.1.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

CA BrightStor ARCserve 11.5.2.0 - 'catirpc.dll' RPC Server Denial of Service

CVE-2007-0816—doswindows

The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlie

28RISCO

abrir ↗

Referência✓ VexDay Proof

MyPHP CMS 0.3.1 - 'pid' SQL Injection

CVE-2008-3497—webappsphp

SQL injection vulnerability in pages.php in MyPHP CMS 0.3.1 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

eDContainer 2.22 - Local File Inclusion

CVE-2008-5818—webappsphp

Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi 4.4/5.4 - gallery SQL Injection

CVE-2008-6210—webappsphp

SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

PixelPost 1.7 - Blind SQL Injection

CVE-2008-0358—webappsphp

SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.