Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.095exploits catalogados

36.945CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.442GitHub PoC 15.312VulnCheck XDB 8.970Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

WebPortal CMS 0.6-beta - Remote Password Change

CVE-2008-0141—webappsphp

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it ea

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow

CVE-2008-4193—remotewindows

Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t

60RISCO

abrir ↗

Referência✓ VexDay Proof

Scriptsez Easy Image Downloader - Local File Download

CVE-2008-6089—webappsphp

Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeBSD 7.0/7.1 - 'ktimer' Local Privilege Escalation

CVE-2009-1041—localfreebsd

The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel

23RISCO

abrir ↗

Referência✓ VexDay Proof

ExBB Italiano 0.2 - exbb[home_path] Remote File Inclusion

CVE-2006-4488—webappsphp

PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when register_g

23RISCO

abrir ↗

Referência✓ VexDay Proof

WFTPD Explorer Pro 1.0 - Remote Heap Overflow (PoC)

CVE-2007-6473—doswindows

Heap-based buffer overflow in Texas Imperial Software WFTPD Pro Explorer 1.0 allows remote FTP servers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Stash 1.0.3 - Multiple SQL Injections

CVE-2008-4080—webappsphp

SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

CVE-2009-1058—doswindows

Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file

23RISCO

abrir ↗

Referência✓ VexDay Proof

BitsCast 0.13.0 - invalid string Remote Denial of Service

CVE-2007-2726—doswindows

BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with c

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCalendar 1.0.4 - 'includedir' Remote File Inclusion

CVE-2008-2836—webappsphp

PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

mUnky 0.0.1 - 'zone' Local File Inclusion

CVE-2008-2876—webappsphp

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary l

23RISCO

abrir ↗

Referência✓ VexDay Proof

PGOSD - '/misc/function.php3' Remote File Inclusion

CVE-2006-5543—webappsphp

PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD), when regi

23RISCO

abrir ↗

Referência✓ VexDay Proof

evilboard 0.1a - SQL Injection / Cross-Site Scripting

CVE-2008-0155—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

ContentNow 1.4.1 - Arbitrary File Upload / Cross-Site Scripting

CVE-2008-3181—webappsphp

Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - GDI+ '.ICO' Remote Division By Zero

CVE-2008-4327—doswindows

gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attacke

28RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Import Tools Mod 0.1.4 - Remote File Inclusion

CVE-2006-7147—webappsphp

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flat Chat 2.0 - 'include online.txt' Remote Code Execution

CVE-2007-1394—webappsphp

Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

STPHPLibrary - 'STPHPLIB_DIR' Remote File Inclusion

CVE-2007-4737—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

CenterIM 4.22.3 - Remote Command Execution

CVE-2008-1467—remotelinux

CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters

23RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP - 'Upload' Remote Code Execution

CVE-2008-6201—webappsphp

Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module calsnails 1.06 - 'mx_common.php' File Inclusion

CVE-2006-6065—webappsphp

PHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module for MxBB Portal 1.06 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

zeeproperty 1.0 - Arbitrary File Upload / Cross-Site Scripting

CVE-2008-6914—webappsphp

Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Camera Life 2.6.2b4 - Arbitrary File Upload

CVE-2008-4366—webappsphp

Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated

23RISCO

abrir ↗

Referência✓ VexDay Proof

PollMentor 2.0 - 'pollmentorres.asp?id' SQL Injection

CVE-2007-0984—webappsasp

SQL injection vulnerability in admin_poll.asp in PollMentor 2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPCC 4.2 Beta - 'nickpage.php?npid' SQL Injection

CVE-2007-0985—webappsphp

SQL injection vulnerability in nickpage.php in phpCC 4.2 beta and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Safari 3.2.2/4b - nested elements XML Parsing Remote Crash

CVE-2009-1233—doswindows

Apple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service (application crash) via an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.64 - 7400 nested elements XML Parsing Remote Crash

CVE-2009-1234—dosmultiple

Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a lon

23RISCO

abrir ↗

Referência✓ VexDay Proof

kawf 1.0 - 'main.php' Remote File Inclusion

CVE-2006-5522—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultimate Fun Book 1.02 - 'function.php' Remote File Inclusion

CVE-2007-1059—webappsphp

PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

LokiCMS 0.3.3 - Remote Command Execution

CVE-2008-1860—webappsphp

Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.