Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

L2J Statistik Script 0.09 - 'index.php' Local File Inclusion

CVE-2007-0173—webappsphp

Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when register_globals is enable

23RISCO

abrir ↗

Referência✓ VexDay Proof

Astanda Directory Project 1.2 - 'link_id' SQL Injection

CVE-2008-0649—webappsphp

SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

MySpace Uploader - 'MySpaceUploader.ocx 1.0.0.4' Remote Buffer Overflow

CVE-2008-0659—remotewindows

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used i

35RISCO

abrir ↗

Referência✓ VexDay Proof

Mihalism Multi Host Download - 'Username' Blind SQL Injection

CVE-2008-0714—webappsphp

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Sermon 0.2 - 'gid' SQL Injection

CVE-2008-0721—webappsphp

SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

CandyPress eCommerce suite 4.1.1.26 - Multiple Vulnerabilities

CVE-2008-0737—webappsasp

SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x version

23RISCO

abrir ↗

Referência✓ VexDay Proof

DomPHP 0.82 - 'index.php' Local File Inclusion

CVE-2008-0745—webappsphp

Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

vp-asp shopping cart 6.09 - SQL Injection / Cross-Site Scripting

CVE-2007-0225—webappsasp

Cross-site scripting (XSS) vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

ImageStation - 'SonyISUpload.cab' 1.0.0.38 ActiveX Buffer Overflow

CVE-2008-0748—remotewindows

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyIS

28RISCO

abrir ↗

Referência✓ VexDay Proof

Hpecs Shopping Cart - Remote Authentication Bypass

CVE-2006-5962—webappsasp

Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.11 - 'private.php' SQL Injection (1)

CVE-2008-0787—webappsphp

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component xfaq 1.2 - 'aid' SQL Injection

CVE-2008-0795—webappsphp

SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

nuBoard 0.5 - 'ssid' SQL Injection

CVE-2008-0796—webappsphp

SQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP < 4.4.5/5.2.1 - 'shmop' Local Code Execution

CVE-2007-1376—locallinux

The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspo

28RISCO

abrir ↗

Referência✓ VexDay Proof

Quintessential Player 4.50.1.82 - Playlist Denial of Service (PoC)

CVE-2006-6261—doswindows

Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service (cra

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module mx_modsdb 1.0 - Remote File Inclusion

CVE-2006-6560—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Po

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board 3.0.x - Blind SQL Injection

CVE-2008-0857—webappsphp

SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Now SMS/Mms Gateway 5.5 - Remote Buffer Overflow

CVE-2008-0871—remotewindows

Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute ar

50RISCO

abrir ↗

Referência✓ VexDay Proof

AR Memberscript - 'usercp_menu.php' Remote File Inclusion

CVE-2006-6590—webappsphp

PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Creative Software AutoUpdate Engine - ActiveX Stack Overflow

CVE-2008-0955—remotewindows

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote atta

50RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow

CVE-2007-1709—localwindows

Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows contex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection

CVE-2007-1712—webappsasp

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

C-Arbre 0.6PR7 - 'ROOT_PATH' Remote File Inclusion

CVE-2007-1721—webappsphp

Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbit

28RISCO

abrir ↗

Referência✓ VexDay Proof

IceBB 1.0-rc5 - Remote Create Admin

CVE-2007-1725—webappsphp

SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

NaviCOPA Web Server 2.01 - Remote Buffer Overflow (Metasploit)

CVE-2007-1733—remotewindows

Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (

28RISCO

abrir ↗

Referência✓ VexDay Proof

eXtremail 2.1.1 - DNS Parsing Bugs Remote (PoC)

CVE-2007-2187—doslinux

Stack-based buffer overflow in eXtremail 2.1.1 and earlier allows remote attackers to execute arbitrary code via a long

23RISCO

abrir ↗

Referência✓ VexDay Proof

Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)

CVE-2006-1664—doslinux

Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, a

28RISCO

abrir ↗

Referência✓ VexDay Proof

MyNews 4.2.2 - 'themefunc.php' Remote File Inclusion

CVE-2007-0633—webappsphp

PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACDSee 9.0 - '.xpm' Local Buffer Overflow

CVE-2007-2193—localwindows

Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build

50RISCO

abrir ↗

Referência✓ VexDay Proof

XnView 1.90.3 - '.xpm' Local Buffer Overflow

CVE-2007-2194—localwindows

Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a craft

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.