Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

aeDating 4.1 - dir[inc] Remote File Inclusion

CVE-2006-4870—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

LulieBlog 1.02 - SQL Injection

CVE-2008-0446—webappsphp

SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

LaVague 0.3 - 'printbar.php?views_path' Remote File Inclusion

CVE-2007-2607—webappsphp

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers t

45RISCO

abrir ↗

Referência✓ VexDay Proof

CGX 20050314 - 'pathCGX' Remote File Inclusion

CVE-2007-2611—webappsphp

Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module books SQL - 'cid' SQL Injection

CVE-2008-0827—webappsphp

SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Exponent CMS 0.96.3 - 'view' Remote Command Execution

CVE-2006-4963—webappsphp

Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunLight CMS 5.3 - 'root' Remote File Inclusion

CVE-2007-2774—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

SanyBee Gallery 0.1.1 - 'p' Local File Inclusion

CVE-2007-6648—webappsphp

Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mihalism Multi Forum Host 3.0.x - Remote File Inclusion

CVE-2007-6657—webappsphp

PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

oneSCHOOL - 'admin/login.asp' SQL Injection

CVE-2007-6665—webappsasp

SQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZenPhoto 1.1.3 - 'rss.php?albumnr' SQL Injection

CVE-2007-6666—webappsphp

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver 2.8.1 - Multiple Vulnerabilities

CVE-2012-5193—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

BrudaGB 1.1 - '/admin/index.php' Remote File Inclusion

CVE-2006-5068—webappsphp

PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.

23RISCO

abrir ↗

Referência✓ VexDay Proof

BrudaNews 1.1 - '/admin/index.php' Remote File Inclusion

CVE-2006-5068—webappsphp

PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.

23RISCO

abrir ↗

Referência✓ VexDay Proof

KGB 1.87 - Local File Inclusion / Remote Code Execution

CVE-2006-5115—webappsphp

Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary loc

23RISCO

abrir ↗

Referência✓ VexDay Proof

DivX Player 6.6.0 - ActiveX 'SetPassword()' Denial of Service (PoC)

CVE-2008-0090—doswindows

A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Int

28RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyWebmin 1.0 - 'window.php' Remote File Inclusion

CVE-2006-5124—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyWebmin 1.0 - 'window.php' Remote File Inclusion

CVE-2006-5125—webappsphp

Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmallNuke 2.0.4 - Pass Recovery SQL Injection

CVE-2008-0147—webappsphp

SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cisco IP Phone 7940 - Reboot (Denial of Service)

CVE-2006-0179—doshardware

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN pack

28RISCO

abrir ↗

Referência✓ VexDay Proof

WU-FTPD 2.6.2 - 'wuftpd-freezer.c' Remote Denial of Service

CVE-2003-0854—doslinux

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, w

23RISCO

abrir ↗

Referência✓ VexDay Proof

VAMP Webmail 2.0beta1 - 'yesno.phtml' Remote File Inclusion

CVE-2006-5147—webappsphp

PHP remote file inclusion vulnerability in wamp_dir/setup/yesno.phtml in VAMP Webmail 2.0beta1 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

FAQ Manager 1.2 - 'categorie.php' SQL Injection

CVE-2008-5287—webappsphp

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

BBaCE 3.5 - '/includes/functions.php' Remote File Inclusion

CVE-2006-5187—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3.5 and earlier allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Klinza Professional CMS 5.0.1 - 'show_hlp.php' File Inclusion

CVE-2006-5189—webappsphp

PHP remote file inclusion vulnerability in funzioni/lib/show_hlp.php in klinza professional cms 5.0.1 and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

LiveCMS 3.4 - 'categoria.php?cid' SQL Injection

CVE-2007-3291—webappsphp

Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Referência✓ VexDay Proof

LiveCMS 3.4 - 'categoria.php?cid' SQL Injection

CVE-2007-3292—webappsphp

Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBill 1.2.5 - 'run_billing.php' Remote File Inclusion

CVE-2007-3306—webappsphp

PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute

35RISCO

abrir ↗

Referência✓ VexDay Proof

Solar Empire 2.9.1.1 - Blind SQL Injection / Hash Retrieve

CVE-2007-3307—webappsphp

SQL injection vulnerability in game_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Invision Gallery 2.0.7 - 'readfile()' / SQL Injection

CVE-2006-5205—webappsphp

Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (do

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.