Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

aspwebalbum 3.2 - Multiple Vulnerabilities

CVE-2004-1553—webappsasp

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the usern

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vlog System 1.1 - SQL Injection

CVE-2008-6111—webappsphp

SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Download-Engine 1.4.2 - 'spaw' Remote File Inclusion

CVE-2006-5291—webappsphp

PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cdsagenda 4.2.9 - 'SendAlertEmail.php' File Inclusion

CVE-2006-5384—webappsphp

PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 a

23RISCO

abrir ↗

Referência✓ VexDay Proof

osTicket 1.12 - Persistent Cross-Site Scripting

CVE-2019-14750—webappsphp

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It w

43RISCO

abrir ↗

Referência✓ VexDay Proof

PHP AMX 0.90 - '/plugins/main.php' Remote File Inclusion

CVE-2006-5427—webappsphp

PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic_

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 - 'include()' Remote File Upload

CVE-2004-2262—webappsphp

ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Brim 1.2.1 - 'renderer' Multiple Remote File Inclusions

CVE-2006-5429—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPPowerCards 2.10 - 'txt.inc.php' Remote Code Execution

CVE-2006-5432—webappsphp

Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register_globals is

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softerra PHP Developer Library 1.5.3 - Remote File Inclusion

CVE-2006-5472—webappsphp

PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

DigitalHive 2.0 RC2 - 'base_include.php' Remote File Inclusion

CVE-2006-5493—webappsphp

PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

pandaBB - 'displayCategory' Remote File Inclusion

CVE-2006-5494—webappsphp

Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB modu

23RISCO

abrir ↗

Referência✓ VexDay Proof

ActualAnalyzer - 'ant' Cookie Command Execution (Metasploit)

CVE-2014-5470CRITICALremoteunix

Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for pa

68RISCO

abrir ↗

Referência✓ VexDay Proof

flinx 1.3 - 'id' SQL Injection

CVE-2008-0468—webappsphp

SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2)

CVE-2006-0476—remotewindows

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with

60RISCO

abrir ↗

Referência✓ VexDay Proof

Move Networks Upgrade Manager Control - Remote Buffer Overflow

CVE-2008-0477—remotewindows

Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgra

28RISCO

abrir ↗

Referência✓ VexDay Proof

Web Wiz Forums 9.07 - 'sub' Directory Traversal

CVE-2008-0480—webappsasp

Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Munch Pro 1.0 - 'switch.asp' SQL Injection

CVE-2006-5880—webappsasp

SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Persits XUpload 3.0 - 'AddFile()' Remote Buffer Overflow

CVE-2008-0492—remotewindows

Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUplo

43RISCO

abrir ↗

Referência✓ VexDay Proof

Bigware Shop 2.0 - 'pollid' SQL Injection

CVE-2008-0498—webappsphp

SQL injection vulnerability in main_bigware_53.tpl.php in Bigware Shop 2.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyClub 0.0.1 - 'page_courante' Local File Inclusion

CVE-2008-0501—webappsphp

Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local file

23RISCO

abrir ↗

Referência✓ VexDay Proof

WORK System E-Commerce 3.0.1 - Remote File Inclusion

CVE-2006-6041—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other ver

23RISCO

abrir ↗

Referência✓ VexDay Proof

Admbook 1.2.2 - 'x-forwarded-for' Remote Command Execution

CVE-2006-0852—webappsphp

Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebThings 1.5.2 - 'editor.php' Remote File Inclusion

CVE-2006-6042—webappsphp

PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is e

23RISCO

abrir ↗

Referência✓ VexDay Proof

SQuery 4.5 - 'libpath' Remote File Inclusion

CVE-2006-1610—webappsphp

PHP remote file inclusion vulnerability in lib/armygame.php in SQuery 4.5 and earlier, as used in products such as Auton

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection

CVE-2006-1111—webappsphp

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, w

23RISCO

abrir ↗

Referência✓ VexDay Proof

CilemNews System 1.1 - 'yazdir.asp' haber_id SQL Injection

CVE-2006-0961—webappsasp

SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection

CVE-2006-1112—webappsphp

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection

CVE-2006-1110—webappsphp

Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HT

23RISCO

abrir ↗

Referência✓ VexDay Proof

D2-Shoutbox 4.2 IPB Mod - 'load' SQL Injection

CVE-2006-1153—webappsphp

SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load pa

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.