Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.032exploits catalogados

36.945CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.442GitHub PoC 15.260VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Joomla! Component Daily Message 1.0.3 - 'id' SQL Injection

CVE-2008-6076—webappsphp

SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Customer 1.2 - 'contact.php' SQL Injection

CVE-2008-6081—webappsphp

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

T-Dreams Job Career Package 3.0 - Insecure Cookie Handling

CVE-2009-1638—webappsasp

Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access b

23RISCO

abrir ↗

Referência✓ VexDay Proof

FaScript FaName 1.0 - SQL Injection

CVE-2008-0328—webappsphp

SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Thyme 1.0 - SQL Injection

CVE-2008-6116—webappsphp

SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hexamail Server 3.0.0.001 - 'pop3' Remote Overflow (PoC)

CVE-2007-4646—doswindows

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of servi

28RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Classified - 'ID' SQL Injection

CVE-2008-6150—webappsasp

SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Shopping Mall - SQL Injection

CVE-2008-6151—webappsasp

SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

KingSoft - 'UpdateOcx2.dll SetUninstallName()' Heap Overflow (PoC)

CVE-2008-1307—doswindows

Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Onli

28RISCO

abrir ↗

Referência✓ VexDay Proof

Pixel8 Web Photo Album 3.0 - SQL Injection

CVE-2008-6153—webappsasp

SQL injection vulnerability in Photo.asp in Jay Patel Pixel8 Web Photo Album 3.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

aflog 1.01 - Cross-Site Scripting / SQL Injection

CVE-2008-0397—webappsphp

Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

BitchX 1.1 Final - MODE Remote Heap Overflow

CVE-2007-4584—remotelinux

Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in

28RISCO

abrir ↗

Referência✓ VexDay Proof

IndexScript 3.0 - 'parent_id' SQL Injection

CVE-2008-6179—webappsphp

SQL injection vulnerability in sug_cat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPenpals 1.1 - 'mail.php?ID' SQL Injection

CVE-2009-1814—webappsphp

SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cobalt 0.1 - Multiple SQL Injections

CVE-2008-6202—webappsasp

SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple CFNetwork - HTTP Response Denial of Service

CVE-2007-0464—dososx

The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remot

28RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection

CVE-2008-0429—webappsphp

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

FutureSoft TFTP Server 2000 - Remote Overwrite (SEH)

CVE-2007-1645—remotewindows

Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrar

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Auto Listings - 'pg' SQL Injection

CVE-2008-6226—webappsphp

SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

PreProject Multi-Vendor Shopping Malls - Multiple Vulnerabilities

CVE-2008-6228—webappsphp

Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setti

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aconon Mail 2004 - Directory Traversal

CVE-2008-0464—webappscgi

Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterpr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_Musica - 'id' SQL Injection

CVE-2008-6234—webappsphp

SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Top Sites - SQL Injection

CVE-2008-6247—webappsphp

SQL injection vulnerability in topsite.php in Scripts For Sites (SFS) EZ Top Sites allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Galatolo Web Manager 1.3a - Cross-Site Scripting / SQL Injection

CVE-2008-6249—webappsphp

SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

exV2 < 2.0.4.3 - 'extract()' Remote Command Execution

CVE-2006-7079—webappsphp

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite

28RISCO

abrir ↗

Referência✓ VexDay Proof

Web Wiz Rich Text Editor 4.0 - Multiple Vulnerabilities

CVE-2008-0481—webappsasp

Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to lis

23RISCO

abrir ↗

Referência✓ VexDay Proof

Q-Shop 3.0 - Cross-Site Scripting / SQL Injection

CVE-2008-6258—webappsasp

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component MooFAQ (com_moofaq) - Local File Inclusion

CVE-2009-2015—webappsphp

Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Jooml

38RISCO

abrir ↗

Referência✓ VexDay Proof

VideoLAN VLC Media Player 0.8.6i - '.tta' File Parsing Heap Overflow (PoC)

CVE-2008-3732—dosmultiple

Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause

28RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN WebShop 1.02 - SQL Injection / Cross-Site Scripting

CVE-2008-6268—webappsphp

SQL injection vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to e

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.