Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

SFS EZ Hot or Not - 'phid' SQL Injection

CVE-2008-6776—webappsphp

SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyPHP Forum 3.0 - Edit Topics / Blind SQL Injection

CVE-2008-6777—webappsphp

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Banner Manager - Insecure Cookie Handling

CVE-2008-6858—webappsphp

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by sett

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Control Panel XE 1.5 - Insecure Cookie Handling

CVE-2008-6859—webappsphp

Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative ac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Live Support 5.1 - Insecure Cookie Handling

CVE-2008-6864—webappsphp

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative a

23RISCO

abrir ↗

Referência✓ VexDay Proof

merlix educate servert - Authentication Bypass / File Disclosure

CVE-2008-6870—webappsasp

Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information

23RISCO

abrir ↗

Referência✓ VexDay Proof

ExoPHPDesk 1.2 Final - Authentication Bypass

CVE-2008-6917—webappsphp

SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

dotProject 2.0.4 - 'baseDir' Remote File Inclusion

CVE-2006-4234—webappsphp

PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

ThePortal 2.2 - Arbitrary File Upload

CVE-2008-6918—webappsphp

Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

TaskDriver 1.3 - Remote Change Admin Password

CVE-2008-6919—webappsphp

profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - Denial of Service

CVE-2008-6995—doswindows

Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a den

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component mambelfish 1.1 - Remote File Inclusion

CVE-2006-4270—webappsphp

PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com_mambelfish) 1.1 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tutti Nova 1.6 - 'TNLIB_DIR' Remote File Inclusion

CVE-2006-4276—webappsphp

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpleBlog 2.0 - 'comments.asp' SQL Injection (2)

CVE-2006-4300—webappsphp

SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service

CVE-2006-4301—doswindows

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attrib

35RISCO

abrir ↗

Referência✓ VexDay Proof

Texas Imperial Software WFTPD 3.23 - 'SIZE' Remote Buffer Overflow

CVE-2006-4318—remotewindows

Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

50RISCO

abrir ↗

Referência✓ VexDay Proof

Apache Tomcat Connector jk2-2.0.2 mod_jk2 - Remote Overflow

CVE-2007-6258—remotelinux

Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers t

35RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)

CVE-2007-6276—dososx

The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Empire CMS 3.7 - 'checklevel.php' Remote File Inclusion

CVE-2006-4354—webappsphp

PHP remote file inclusion vulnerability in e/class/CheckLevel.php in Phome Empire CMS 3.7 and earlier allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

AlberT-EasySite 1.0a5 - 'PSA_PATH' Remote File Inclusion

CVE-2006-4426—webappsphp

PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite (AES)

23RISCO

abrir ↗

Referência✓ VexDay Proof

eFiction < 2.0.7 - Remote Admin Authentication Bypass

CVE-2006-4427—webappsphp

index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (

23RISCO

abrir ↗

Referência✓ VexDay Proof

SerWeb 2.0.0 dev1 2007-02-20 - Multiple Local/Remote File Inclusion Vulnerabilities

CVE-2007-6289—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Falt4 CMS rc4 10.9.2007 - Multiple Vulnerabilities

CVE-2007-6310—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Linksys SPA941 - Remote Reboot (Denial of Service)

CVE-2007-2270—doshardware

The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 0377 (0xff) cha

23RISCO

abrir ↗

Referência✓ VexDay Proof

USP FOSS Distribution 1.01 - 'dnld' Remote File Disclosure

CVE-2007-2271—webappsphp

Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

BinGo News 3.01 - 'bnrep' Remote File Inclusion

CVE-2006-4648—webappsphp

PHP remote file inclusion vulnerability in bp_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCalendar 1.2.4 - Remote Code Execution

CVE-2012-1495—webappsphp

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user

60RISCO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.00 - 'search.php?search' SQL Injection

CVE-2007-2600—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Haberx 1.02 < 1.1 - 'tr' SQL Injection

CVE-2006-4853—webappsasp

SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

aeDating 4.1 - dir[inc] Remote File Inclusion

CVE-2006-4870—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attacker

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.