Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.095exploits catalogados

36.945CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.442GitHub PoC 15.312VulnCheck XDB 8.970Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

nightfall personal diary 1.0 - Cross-Site Scripting / File Disclosure

CVE-2008-5591—webappsphp

Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP AutoDealer - Remote Database Disclosure

CVE-2008-5608—webappsasp

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ikon ADManager 2.1 - Remote Database Disclosure

CVE-2008-5596—webappsasp

Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which a

23RISCO

abrir ↗

Referência✓ VexDay Proof

User Engine Lite ASP - 'users.mdb' Database Disclosure

CVE-2008-5601—webappsphp

User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Turnkey Arcade Script - SQL Injection (1)

CVE-2008-5629—webappsphp

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Mod FileBase 2.0 - 'id' SQL Injection

CVE-2008-1305—webappsphp

SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

vuBB 0.2 Final - 'cookie' SQL Injection

CVE-2006-0962—webappsphp

SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

Lansuite 2.1.0 Beta - 'fid' SQL Injection

CVE-2006-1001—webappsphp

SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyCalendar 4.0tr - Multiple Vulnerabilities

CVE-2008-1345—webappsphp

Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow

CVE-2006-1236—remotelinux

Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrar

28RISCO

abrir ↗

Referência✓ VexDay Proof

Webmin 1.910 - 'Package Updates' Remote Command Execution (Metasploit)

CVE-2019-12840—remotelinux

In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root pr

60RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.45 - Multiple Vulnerabilities

CVE-2006-1346—webappsphp

Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Ticket 0.71 - 'search.php' SQL Injection

CVE-2006-1481—webappsphp

SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crafty Syntax Image Gallery 3.1g - Remote Code Execution

CVE-2006-1668—webappsphp

newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Digital WebShop 1.128 - Multiple Remote File Inclusions

CVE-2006-4945—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier al

23RISCO

abrir ↗

Referência✓ VexDay Proof

BCWB 0.99 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4946—webappsphp

PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.

23RISCO

abrir ↗

Referência✓ VexDay Proof

WSN Links Basic Edition - 'catid' SQL Injection

CVE-2007-3981—webappsphp

SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'sql.php' Remote File Inclusion

CVE-2006-2142—webappsphp

PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aardvark Topsites PHP 4.2.2 - 'lostpw.php' Remote File Inclusion

CVE-2006-2149—webappsphp

PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX Safari 2.0.3 (417.9.2) - 'ROWSPAN' Denial of Service (PoC)

CVE-2006-2019—dososx

Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CP

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACal 2.2.6 - 'day.php' Remote File Inclusion

CVE-2006-2261—webappsphp

PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência✓ VexDay Proof

metajour 2.1 - 'system_path' Remote File Inclusion

CVE-2006-2768—webappsphp

PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

gxine 0.5.6 - HTTP Plugin Remote Buffer Overflow (PoC)

CVE-2006-2802—doslinux

Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial o

28RISCO

abrir ↗

Referência✓ VexDay Proof

gnopaste 0.5.3 - 'common.php' Remote File Inclusion

CVE-2006-2834—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Redaxo 3.2 - 'INCLUDE_PATH' Remote File Inclusion

CVE-2006-2845—webappsphp

PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspWebLinks 2.0 - SQL Injection / Admin Pass Change

CVE-2006-2848—webappsasp

links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct reques

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module CBSms 1.0 - Remote File Inclusion

CVE-2006-3294—webappsphp

PHP remote file inclusion vulnerability in mod_cbsms_messages.php in CBSMS Mambo Module 1.0 and earlier, when register_g

23RISCO

abrir ↗

Referência✓ VexDay Proof

MagNet BeeHive CMS (header) - Remote File Inclusion

CVE-2006-3266—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, a

28RISCO

abrir ↗

Referência✓ VexDay Proof

AspWebCalendar 4.5 - 'eventid' SQL Injection

CVE-2004-1552—webappsasp

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the us

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component pc_cookbook 0.3 - Remote File Inclusion

CVE-2006-3530—webappsphp

PHP remote file inclusion vulnerability in com_pccookbook/pccookbook.php in the PccookBook Component for Mambo and Jooml

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.