Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.095exploits catalogados

36.945CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.442GitHub PoC 15.312VulnCheck XDB 8.970Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

ExBB 0.22 - Local/Remote File Inclusion

CVE-2008-1861—webappsphp

Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_gl

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sun xVM VirtualBox < 1.6.4 - Privilege Escalation (PoC)

CVE-2008-3431HIGHsob ataquedosmultiple

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communicat

71RISCO

abrir ↗

Referência✓ VexDay Proof

DFLabs PTK 1.0 - Local Command Execution

CVE-2008-6793—webappsphp

The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discuz! - Remote Reset User Password

CVE-2008-6957—webappsphp

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostp

23RISCO

abrir ↗

Referência✓ VexDay Proof

X10media Mp3 Search Engine 1.6 - Remote File Disclosure

CVE-2008-6960—webappsphp

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

PMB Services 3.0.13 - Multiple Remote File Inclusions

CVE-2007-1415—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Site Sift Listings - 'id' SQL Injection

CVE-2008-1869—webappsphp

SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id p

23RISCO

abrir ↗

Referência✓ VexDay Proof

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Remote Buffer Overflow

CVE-2008-4048—remotewindows

Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPo

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Multiple Vulnerabilities

CVE-2008-6978—webappsasp

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Links Directory 1.1 - 'cat_id' SQL Injection

CVE-2008-1871—webappsphp

SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

PassWiki 0.9.16 RC3 - 'site_id' Local File Inclusion

CVE-2008-6423—webappsphp

Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

SkaLinks 1.5 - 'register.php' Arbitrary Add Editor

CVE-2008-7010—webappsphp

Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Shadow Premod 2.7.1 - Remote File Inclusion

CVE-2006-4664—webappsphp

PHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1 and earlier allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

VicFTPS < 5.0 - 'CWD' Remote Buffer Overflow (PoC)

CVE-2007-1014—doswindows

Stack-based buffer overflow in VicFTPS before 5.0 allows remote attackers to cause a denial of service (application cras

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sony Network Camera SNC-P5 1.0 - ActiveX viewer Heap Overflow (PoC)

CVE-2007-3488—doswindows

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5

28RISCO

abrir ↗

Referência✓ VexDay Proof

ThinkEdit 1.9.2 - 'render.php' Remote File Inclusion

CVE-2006-6426—webappsphp

PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when register_glo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Colloquy 2.1.3545 - 'INVITE' Format String Denial of Service

CVE-2007-0344—dososx

Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

CPCommerce 1.1.0 - Cross-Site Scripting / Local File Inclusion

CVE-2008-1907—webappsphp

Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pie Web M{a_e}sher 0.5.3 - Multiple Remote File Inclusions

CVE-2008-5332—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Star Articles 6.0 - Arbitrary File Upload

CVE-2008-7076—webappsphp

Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)

CVE-2008-1912—doswindows

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RISCO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche FreeWallpaper - Remote Database Disclosure

CVE-2008-5897—webappsasp

CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

ReVou Twitter Clone - Admin Password Change

CVE-2008-6752—webappsphp

adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original passw

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxCamArchive 2.2 - Bypass Configuration Download

CVE-2008-6955—webappsphp

mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

MapLab MS4W 2.2.1 - Remote File Inclusion

CVE-2007-1843—webappsphp

PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

MySpace Content Zone 3.x - Arbitrary File Upload

CVE-2007-6668—webappsphp

admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

zKup CMS 2.0 < 2.3 - Remote Add Admin

CVE-2008-7124—webappsphp

zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

ArcadeBuilder Game Portal Manager 1.7 - SQL Injection

CVE-2007-3521—webappsphp

SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Filiale 1.0.4 - 'idFiliale' SQL Injection

CVE-2008-1935—webappsphp

SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rayzz Script 2.0 - Local/Remote File Inclusion

CVE-2007-6230—webappsphp

Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attack

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.