Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.095exploits catalogados

36.945CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.442GitHub PoC 15.312VulnCheck XDB 8.970Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

RhinoSoft Serv-U FTP Server 7.3 - (Authenticated) 'stou con:1' Denial of Service

CVE-2008-4500—doswindows

Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consu

28RISCO

abrir ↗

Referência✓ VexDay Proof

easyLink 1.1.0 - 'detail.php' SQL Injection

CVE-2008-6471—webappsphp

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer 6 / Provideo Camimage - 'ISSCamControl.dll 1.0.1.5' Remote Buffer Overflow

CVE-2007-3111—remotewindows

Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used

35RISCO

abrir ↗

Referência✓ VexDay Proof

Openfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-6508—webappsjsp

Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows rem

60RISCO

abrir ↗

Referência✓ VexDay Proof

BosClassifieds - 'cat_id' SQL Injection

CVE-2008-6526—webappsphp

SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Merchant 2.2.0 - 'index.php?show' Remote File Inclusion

CVE-2007-2424—webappsphp

PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

TmaxSoft JEUS - Alternate Data Streams File Disclosure

CVE-2008-6528—remotewindows

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simplog 0.9.2 - 's' Remote Command Execution

CVE-2006-1777—webappsphp

Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution

CVE-2008-1060—webappsphp

Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote a

35RISCO

abrir ↗

Referência✓ VexDay Proof

Neostrada Livebox Router - Remote Network Down (PoC)

CVE-2008-6497—doswindows

The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HTT

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenDock FullCore 4.4 - Remote File Inclusion

CVE-2006-5392—webappsphp

Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

XAMPP for Windows 1.6.0a - 'mssql_connect()' Remote Buffer Overflow

CVE-2007-2079—remotewindows

The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - A HREF Denial of Service

CVE-2008-6998—doswindows

Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

GNUEDU 1.3b2 - Multiple Remote File Inclusions

CVE-2007-2609—webappsphp

Multiple PHP remote file inclusion vulnerabilities in gnuedu 1.3b2 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Java SE Runtime Environment JRE 6 Update 13 - Multiple Vulnerabilities

CVE-2009-1672—doswindows

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 1

23RISCO

abrir ↗

Referência✓ VexDay Proof

Portail Web PHP 2.5.1.1 - Multiple Inclusion Vulnerabilities

CVE-2008-1068—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

FretsWeb 1.2 - Multiple Local File Inclusions

CVE-2009-2109—webappsphp

Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via director

23RISCO

abrir ↗

Referência✓ VexDay Proof

HSRS 1.0 - 'addcode.php' Remote File Inclusion

CVE-2006-6154—webappsphp

PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bubla 0.9.2 - 'bu_dir' Multiple Remote File Inclusions

CVE-2006-6867—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Vladimir Menshakov buratinable templator (aka bubla) 0.9.1 allow r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component RSfiles 1.0.2 - 'path' File Download

CVE-2007-4504—webappsphp

Directory traversal vulnerability in index.php in the RSfiles component (com_rsfiles) 1.0.2 and earlier for Joomla! allo

38RISCO

abrir ↗

Referência✓ VexDay Proof

WEBInsta CMS 0.3.1 - 'templates_dir' Remote File Inclusion

CVE-2006-4196—webappsphp

PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Linksys SPA941 - '\377' Character Remote Denial of Service

CVE-2007-2270—doshardware

The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 0377 (0xff) cha

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.3 'Tidy' Extension - Local Buffer Overflow

CVE-2007-3294—localwindows

Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow con

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultra Crypto Component - 'CryptoX.dll 2.0' Remote Buffer Overflow

CVE-2007-4903—remotewindows

Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Social Groupie - 'create_album.php' Arbitrary File Upload

CVE-2008-6367—webappsphp

Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users to

23RISCO

abrir ↗

Referência✓ VexDay Proof

AFGB Guestbook 2.2 - 'Htmls' Remote File Inclusion

CVE-2006-5307—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cyberfolio 2.0 RC1 - 'av' Remote File Inclusion

CVE-2006-5768—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when register_globals is enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Youngzsoft CMailServer 5.4.6 - 'CMailCOM.dll' Remote Overwrite (SEH)

CVE-2008-6922—remotewindows

Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

IP3 NetAccess < 4.1.9.6 - Arbitrary File Disclosure

CVE-2007-0883—remotehardware

Directory traversal vulnerability in portalgroups/portalgroups/getfile.cgi in IP3 NetAccess before firmware 4.1.9.6 allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp GEN_MSN Plugin - Heap Buffer Overflow (PoC)

CVE-2009-0833—doswindows

Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.