Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

PHP Director 0.21 - Remote Command Execution

CVE-2009-0604—webappsphp

SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

EZ-Blog Beta2 - 'category' SQL Injection

CVE-2009-1626—webappsphp

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Hosting Index - 'cat_id' SQL Injection

CVE-2008-2083—webappsphp

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

BP Blog 7.0 - 'layout' SQL Injection

CVE-2007-1445—webappsasp

SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation

CVE-2008-4190—locallinux

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mic_blog 0.0.3 - SQL Injection / Privilege Escalation

CVE-2008-6805—webappsphp

Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Relative Real Estate Systems 3.0 - 'listing_id' SQL Injection

CVE-2008-3185—webappsphp

SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

alitalk 1.9.1.1 - Multiple Vulnerabilities

CVE-2008-0371—webappsphp

Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBP RC3 (2.204) - SQL Injection / Remote Code Execution

CVE-2007-0370—webappsphp

Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to inj

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmartBlog 1.3 - 'index.php' SQL Injection

CVE-2008-2183—webappsphp

SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Link Trader - 'lnkid' SQL Injection

CVE-2008-6102—webappsphp

SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

ezcms 1.2 - Blind SQL Injection / Authentication Bypass

CVE-2008-2921—webappsphp

SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

iyzi Forum 1.0 Beta 3 - SQL Injection

CVE-2006-5054—webappsasp

SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ovidentia 6.6.5 - 'item' SQL Injection

CVE-2008-4423—webappsphp

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPKIT 1.6.4pl1 - 'article.php' SQL Injection

CVE-2007-6134—webappsphp

SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Article Friendly Pro/Standard - SQL Injection

CVE-2008-3670—webappsphp

SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Comdev Web Blogger 4.1.3 - 'arcmonth' SQL Injection

CVE-2008-6250—webappsphp

SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Def-Blog 1.0.3 - 'comadd.php' SQL Injection

CVE-2006-5383—webappsphp

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Webdrivers Simple Forum - 'message_details.php' SQL Injection

CVE-2006-5802—webappsphp

SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASPNuke 0.80 - 'register.asp' SQL Injection

CVE-2006-6070—webappsasp

SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

NewsLetter MX 1.0.2 - 'ID' SQL Injection

CVE-2006-6787—webappsasp

SQL injection vulnerability in admin/admin_mail_adressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Einstein 1.01 - Local Password Disclosure

CVE-2005-0619—localwindows

Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows l

23RISCO

abrir ↗

Referência✓ VexDay Proof

xweblog 2.1 - 'kategori.asp' SQL Injection

CVE-2006-5023—webappsasp

SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-Smart Cart 1.0 - 'Product_ID' SQL Injection

CVE-2007-0092—webappsasp

SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

eDocStore - 'doc.php?doc_id' SQL Injection

CVE-2007-3452—webappsphp

SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MamboWiki 0.9.6 - Remote File Inclusion

CVE-2006-4282—webappsphp

PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com_mambowiki) 0.9.6 and earlier f

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component jooget 2.6.8 - SQL Injection

CVE-2008-0829—webappsphp

SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo

23RISCO

abrir ↗

Referência✓ VexDay Proof

EQdkp 1.3.2f - 'user_id' Authentication Bypass

CVE-2008-2222—webappsphp

SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Link Bid Script 1.5 - Multiple SQL Injections

CVE-2008-4175—webappsphp

Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashGet 1.9.0.1012 - 'FTP PWD Response' SEH Stack Overflow

CVE-2008-4321—remotewindows

Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long res

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.