Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

jaxultrabb 2.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2965—webappsphp

Cross-site scripting (XSS) vulnerability in viewforum.php in JaxUltraBB (JUBB) 2.0 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

CiBlog 3.1 - 'id' SQL Injection

CVE-2008-2971—webappsphp

SQL injection vulnerability in links-extern.php in CiBlog 3.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP KnowledgeBase Script 2.4 - 'cat_id' SQL Injection

CVE-2008-2972—webappsphp

SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the ca

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinXCMS 1.1 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2975—webappsphp

Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

HomePH Design 2.10 RC2 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

CVE-2008-2982—webappsphp

Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register_globals is enabled, allow remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

cmreams CMS 1.3.1.1 beta2 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2984—webappsphp

Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Autos 2.9.1 - 'catid' SQL Injection

CVE-2008-4498—webappsphp

SQL injection vulnerability in searchresults.php in PHP Autos 2.9.1 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

ABC-View Manager 1.42 - '.psp' Local Buffer Overflow

CVE-2007-2284—localwindows

Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted .

23RISCO

abrir ↗

Referência✓ VexDay Proof

cmreams CMS 1.3.1.1 beta2 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2985—webappsphp

Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpDMCA 1.0.0 - Multiple Remote File Inclusions

CVE-2008-2986—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpDMCA 1.0.0 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

audioCMS arash 0.1.4 - 'arashlib_dir' Remote File Inclusion

CVE-2007-2301—webappsphp

Multiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

IP Reg 0.4 - Blind SQL Injection

CVE-2008-4523—webappsphp

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

RiotPix 0.61 - 'forumid' Blind SQL Injection

CVE-2009-0110—webappsphp

SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component FacileForms 1.4.4 - Remote File Inclusion

CVE-2008-2990—webappsphp

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 fo

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPBandManager 0.8 - 'index.php?pg' Remote File Inclusion

CVE-2007-2341—webappsphp

PHP remote file inclusion vulnerability in suite/index.php in phpBandManager 0.8 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPortal 1.2 - Multiple Remote File Inclusions

CVE-2008-3022—webappsphp

Multiple PHP remote file inclusion vulnerabilities in sablonlar/gunaysoft/gunaysoft.php in PHPortal 1.2 Beta allow remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Efestech Shop 2.0 - 'cat_id' SQL Injection

CVE-2008-3030—webappsphp

SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Poll Manager XE 4.1 - 'xlacomments.asp' SQL Injection

CVE-2008-4569—webappsasp

SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft HTML Workshop 4.74 - Universal Buffer Overflow

CVE-2009-0133—localwindows

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary

50RISCO

abrir ↗

Referência✓ VexDay Proof

Acoustica MP3 CD Burner 4.51 Build 147 - '.asx' Local Buffer Overflow

CVE-2007-3006—localwindows

Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Agenda 2.2.4 - 'index.php' Local File Inclusion

CVE-2008-3031—webappsphp

Directory traversal vulnerability in index.php in Simple PHP Agenda 2.2.4 and earlier allows remote attackers to include

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS little 0.0.1 - 'template' Local File Inclusion

CVE-2008-3036—webappsphp

Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Brightcode Weblinks - 'catid' SQL Injection

CVE-2008-3083—webappsphp

SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyNewsletter 0.8 (beta5) - Multiple Vulnerabilities

CVE-2007-2372—webappsphp

admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kasseler CMS 1.3.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-3088—webappsphp

Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmotion 2.0 - 'update_profile.php' Arbitrary File Upload

CVE-2008-3117—webappsphp

Unrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows remote authenticated us

23RISCO

abrir ↗

Referência✓ VexDay Proof

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (1)

CVE-2009-0174—localwindows

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Real Estate Script 1.1 - SQL Injection

CVE-2008-3123—webappsphp

SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Hotel Script 1.0 - SQL Injection

CVE-2008-3124—webappsphp

SQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Last Minute Script 4.0 - SQL Injection

CVE-2008-3125—webappsphp

SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.