Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

KubeLance 1.6.4 - 'ipn.php' Local File Inclusion

CVE-2008-2091—webappsphp

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpinv 0.8.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2695—webappsphp

Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

FireAnt 1.3 - 'index.php' Local File Inclusion

CVE-2008-2896—webappsphp

Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary l

23RISCO

abrir ↗

Referência✓ VexDay Proof

LanSuite 3.3.2 - 'design' Local File Inclusion

CVE-2008-4330—webappsphp

Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Globsy 1.0 - Remote File Rewriting

CVE-2008-5966—webappsphp

globsy_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection

CVE-2008-6407—webappsphp

Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component live chat - SQL Injection / Open Proxy

CVE-2008-6882—webappsphp

Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Libra PHP File Manager 1.18 - Insecure Cookie Handling

CVE-2008-7027—webappsphp

Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the

23RISCO

abrir ↗

Referência✓ VexDay Proof

PAD Site Scripts 3.6 - Arbitrary Database Backup

CVE-2009-1941—webappsphp

PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which al

23RISCO

abrir ↗

Referência✓ VexDay Proof

VT-Auth 1.0 - 'zHk8dEes3.txt' File Disclosure

CVE-2009-2024—webappsasp

Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which a

23RISCO

abrir ↗

Referência✓ VexDay Proof

cf shopkart 5.2.2 - SQL Injection / File Disclosure

CVE-2008-6321—webappsasp

CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (1)

CVE-2006-2151—webappsphp

PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enab

28RISCO

abrir ↗

Referência✓ VexDay Proof

PhShoutBox 1.5 - Insecure Cookie Handling

CVE-2008-1971—webappsphp

phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain p

23RISCO

abrir ↗

Referência✓ VexDay Proof

DreamPics Builder - 'page' SQL Injection

CVE-2008-3119—webappsphp

SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Oracle 10g - 'LT.FINDRICSET' SQL Injection (IDS Evasion)

CVE-2007-5511—localmultiple

SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.

50RISCO

abrir ↗

Referência✓ VexDay Proof

xNews 1.3 - 'xNews.php' SQL Injection

CVE-2007-0569—webappsphp

SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

ImperialBB 2.3.5 - Arbitrary File Upload

CVE-2008-3093—webappsphp

Unrestricted file upload vulnerability in ImperialBB 2.3.5 and earlier allows remote authenticated users to upload and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

pPIM 1.0 - Arbitrary File Delete / Cross-Site Scripting

CVE-2008-4426—webappsphp

Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

X-ice News System 1.0 - 'devami.asp?id' SQL Injection

CVE-2007-1438—webappsasp

SQL injection vulnerability in devami.asp in X-Ice News System 1.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Skype Extension for Firefox Beta 2.2.0.95 - Clipboard Writing

CVE-2008-5697—remotewindows

The skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote attackers to write arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Friendfinder 3.3 - 'view.php?id' SQL Injection

CVE-2007-1838—webappsphp

SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

BBPortalS 2.0 - Blind SQL Injection

CVE-2007-5630—webappsphp

SQL injection vulnerability in tnews.php in BBsProcesS BBPortalS 1.5.10 through 2.0 allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Uploader 1.1 - 'Filename' File Disclosure

CVE-2008-7178—webappsphp

Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pinnacle Studio 12 - '.hfz' Directory Traversal

CVE-2009-1744—localwindows

InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Papoo CMS 3.x - 'pfadhier' Local File Inclusion

CVE-2009-0735—webappsphp

Directory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when register_globals is enabled an

23RISCO

abrir ↗

Referência✓ VexDay Proof

MySpeach 2.1b - 'up.php' Remote File Inclusion

CVE-2007-0498—webappsphp

PHP remote file inclusion vulnerability in up.php in MySpeach 2.1 beta and possibly earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

iziContents rc6 - Local/Remote File Inclusion

CVE-2007-5053—webappsphp

Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Project Management 0.8.10 - Multiple Local/Remote File Inclusions

CVE-2007-5641—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers t

35RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Ajax Shoutbox 0.0.5 - Remote File Inclusion

CVE-2006-5312—webappsphp

PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

zFeeder 1.6 - 'admin.php' Admin Bypass

CVE-2009-0807—webappsphp

zFeeder 1.6 allows remote attackers to gain administrative access via a direct request to admin.php.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.