Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

MobilePublisherPHP 1.5 RC2 - Remote File Inclusion

CVE-2006-4849—webappsphp

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting / SQL Injection Code Execution

CVE-2006-4962—webappsphp

Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - Remote Code Execution

CVE-2006-4962—webappsphp

Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpQuestionnaire 3.12 - 'phpQRootDir' Remote File Inclusion

CVE-2006-4966—webappsphp

PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Polaring 0.04.03 - 'general.php' Remote File Inclusion

CVE-2006-5078—webappsphp

PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

faceStones personal 2.0.42 - 'fs_form_links.php' File Inclusion

CVE-2006-5070—webappsphp

PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

paBugs 2.0 Beta 3 - 'class.mysql.php' Remote File Inclusion

CVE-2006-5079—webappsphp

PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

evoBB 0.3 - 'path' Remote File Inclusion

CVE-2006-5087—webappsphp

Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dimension of phpBB 0.2.6 - 'phpbb_root_path' Remote File Inclusions

CVE-2006-5222—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeForum 0.9.7 - 'forum.php' Remote File Inclusion

CVE-2006-5230—webappsphp

PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ciamos CMS 0.9.6b - 'config.php' Remote File Inclusion

CVE-2006-5257—webappsphp

PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System (CMS) 0.

23RISCO

abrir ↗

Referência✓ VexDay Proof

compteur 2.0 - 'param_editor.php' Remote File Inclusion

CVE-2006-5259—webappsphp

PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyNews 1.4 - 'cfg_include_dir' Remote File Inclusion

CVE-2006-5261—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Office 2003 - '.PPT' Local Buffer Overflow (PoC)

CVE-2006-5296—doswindows

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record

28RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB lat2cyr Mod 1.0.1 - 'lat2cyr.php' Remote File Inclusion

CVE-2006-5305—webappsphp

PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Conference Systems 1.1.4 - 'fullpath' File Inclusion

CVE-2006-5308—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

TribunaLibre 3.12 Beta - 'ftag.php' Remote File Inclusion

CVE-2006-5314—webappsphp

PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

registroTL - 'main.php' Remote File Inclusion

CVE-2006-5315—webappsphp

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

eboli - 'index.php' Remote File Inclusion

CVE-2006-5317—webappsphp

PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Album Photo Sans Nom 1.6 - Remote Source Disclosure

CVE-2006-5320—webappsphp

Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary fi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Meetings Filing Application - Remote File Inclusion

CVE-2006-5517—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

QnECMS 2.5.6 - 'adminfolderpath' Remote File Inclusion

CVE-2006-5627—webappsphp

Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitra

28RISCO

abrir ↗

Referência✓ VexDay Proof

Free Image Hosting 1.0 - 'forgot_pass.php' File Inclusion

CVE-2006-5670—webappsphp

PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

iPrimal Forums - '/admin/index.php' Remote File Inclusion

CVE-2006-5788—webappsphp

PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

CVE-2006-5795—webappsphp

Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Soholaunch Pro 4.9 r36 - Remote File Inclusion

CVE-2006-5796—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Soholaunch Pro Edition 4.9 r46 and earlier, when register_globals

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

CVE-2006-5811—webappsphp

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Essentia Web Server 2.15 - GET Remote Denial of Service

CVE-2006-5850—doswindows

Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Powies pForum 1.29a - 'editpoll.php' SQL Injection

CVE-2006-6038—webappsphp

SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

XMPlay 3.3.0.4 - '.M3U' Filename Local Buffer Overflow

CVE-2006-6063—localwindows

Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.