Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.095exploits catalogados

36.945CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.442GitHub PoC 15.312VulnCheck XDB 8.970Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Q-Shop 3.0 - Cross-Site Scripting / SQL Injection

CVE-2008-6259—webappsasp

Cross-site scripting (XSS) vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component musepoes - 'aid' SQL Injection

CVE-2008-0515—webappsphp

SQL injection vulnerability in index.php in the musepoes (com_musepoes) component for Mambo and Joomla! allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

RakhiSoftware Shopping Cart - SQL Injection

CVE-2008-6277—webappsphp

SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

elvin bts 1.2.0 - Multiple Vulnerabilities

CVE-2009-2129—webappsphp

Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authen

23RISCO

abrir ↗

Referência✓ VexDay Proof

Lycos FileUploader Control - ActiveX Remote Buffer Overflow

CVE-2008-0443—remotewindows

Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUpl

28RISCO

abrir ↗

Referência✓ VexDay Proof

PunBB (Private Messaging System 1.2.x) - Multiple Local File Inclusions

CVE-2008-6308—webappsphp

Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmyGallery 1.5beta - '/common-tpl-vars.php' Local/Remote File Inclusion

CVE-2008-6318—webappsphp

PHP remote file inclusion vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin User Photo Component - Arbitrary File Upload

CVE-2013-1916—webappsphp

In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upl

28RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Word 2007 - Multiple Vulnerabilities

CVE-2007-1911—doswindows

Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU con

28RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component - Denial of Service

CVE-2007-3169—doswindows

Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Ynews 1.0.0 - 'id' SQL Injection

CVE-2008-0653—webappsphp

SQL injection vulnerability in index.php in the Ynews (com_ynews) 1.0.0 component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Job Board - Authentication Bypass

CVE-2008-6329—webappsphp

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyTopix 1.3.0 - SQL Injection

CVE-2008-6330—webappsphp

SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ProDesk 1.0/1.2 - Local File Inclusion

CVE-2008-6222—webappsphp

Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows

43RISCO

abrir ↗

Referência✓ VexDay Proof

Text Lines Rearrange Script - 'Filename' File Disclosure

CVE-2008-6336—webappsphp

Directory traversal vulnerability in download.php in Text Lines Rearrange Script 1.0, when register_globals is enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Corel Paint Shop Pro Photo 11.20 - '.clp' Local Buffer Overflow

CVE-2007-2209—localwindows

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_noticias 1.0 - SQL Injection

CVE-2008-0670—webappsphp

SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Business Survey Pro 1.0 - 'id' SQL Injection

CVE-2008-6349—webappsphp

SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP-CMS 1.0 - 'cha' SQL Injection

CVE-2008-6353—webappsasp

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Online Media Technologies 'AVSMJPEGFILE.DLL 1.1' - Remote Buffer Overflow (PoC)

CVE-2007-6327—doswindows

Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attac

28RISCO

abrir ↗

Referência✓ VexDay Proof

Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow

CVE-2008-2745—remotewindows

Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows

28RISCO

abrir ↗

Referência✓ VexDay Proof

ITechBids 5.0 - 'item_id' SQL Injection

CVE-2008-0692—webappsphp

SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Visual Events Calendar 1.1 - 'cfg_dir' Remote File Inclusion

CVE-2006-4060—webappsphp

PHP remote file inclusion vulnerability in calendar.php in Visual Events Calendar 1.1 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Oreon 1.4 / Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities

CVE-2007-6485—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute a

28RISCO

abrir ↗

Referência✓ VexDay Proof

PowerNews 2.5.6 - Local File Inclusion

CVE-2008-0742—webappsphp

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include

23RISCO

abrir ↗

Referência✓ VexDay Proof

Serv-U FTP Server 7.3 - (Authenticated) Remote FTP File Replacement

CVE-2008-4501—remotewindows

Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote auth

28RISCO

abrir ↗

Referência✓ VexDay Proof

Explay CMS 2.1 - Insecure Cookie Handling

CVE-2008-6411—webappsphp

Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting th

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Auction Pro Platinum Skin - 'item_id' SQL Injection

CVE-2008-6414—webappsphp

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

BloofoxCMS 0.3.4 - 'lang' Local File Inclusion

CVE-2008-5748—webappsphp

Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to rea

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component NeoGallery 1.1 - SQL Injection

CVE-2008-0752—webappsphp

SQL injection vulnerability in index.php in the Neogallery (com_neogallery) 1.1 component for Joomla! allows remote atta

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.