Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.095exploits catalogados

36.945CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.442GitHub PoC 15.312VulnCheck XDB 8.970Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

OTSCMS 2.1.3 - Multiple Remote File Inclusions

CVE-2006-5546—webappsphp

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.3

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPPeanuts 1.3 Beta - 'Inspect.php' Remote File Inclusion

CVE-2006-5948—webappsphp

PHP remote file inclusion vulnerability in pntUnit/Inspect.php in phpPeanuts 1.1 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

MDForum 2.0.1 - 'PNSVlang' Remote Code Execution

CVE-2006-6869—webappsphp

Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1 and earlier, when magic_

23RISCO

abrir ↗

Referência✓ VexDay Proof

VerliAdmin 0.3 - 'language.php' Local File Inclusion

CVE-2007-0098—webappsphp

Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

pragmaMX Module Landkarten 2.1 (Windows) - Local File Inclusion

CVE-2007-1539—webappsphp

Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAddressBook 2.11 - Multiple Local File Inclusions

CVE-2008-1492—webappsphp

Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Interact 2.4.1 - 'help.php' Local File Inclusion

CVE-2008-3384—webappsphp

Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpRealty 0.3 - 'INC' Remote File Inclusion

CVE-2008-4134—webappsphp

PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other ver

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin fMoblog 2.1 - 'id' SQL Injection

CVE-2009-0968—webappsphp

SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

iziContents rc6 - Local/Remote File Inclusion

CVE-2005-4600—webappsphp

Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

KnowledgeBuilder 2.2 - 'visEdit_root' Remote File Inclusion

CVE-2006-5919—webappsphp

PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

addalink 4 Beta - Write Approved Links

CVE-2008-4146—webappsphp

Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field

23RISCO

abrir ↗

Referência✓ VexDay Proof

YAP 1.1.1 - Blind SQL Injection / SQL Injection

CVE-2009-1038—webappsphp

Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

DBGuestbook 1.1 - 'dbs_base_path' Remote File Inclusion

CVE-2007-1165—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3425—webappsphp

Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion

CVE-2008-1651—webappsphp

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

gapicms 9.0.2 - 'dirDepth' Remote File Inclusion

CVE-2008-3183—webappsphp

PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX Random Ad 1.3 - Remote File Inclusion

CVE-2008-3401—webappsphp

PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hotel Reservation System - 'city.asp' Blind SQL Injection

CVE-2008-4204—webappsasp

SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bloginator 1a - SQL Injection / Command Injection (via Cookie Bypass )

CVE-2009-1049—webappsphp

SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

KDPics 1.11 - 'exif.php?lib_path' Remote File Inclusion

CVE-2006-6516—webappsphp

Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashFXP 3.4.0 build 1145 - Remote Buffer Overflow (Denial of Service) (PoC)

CVE-2007-0825—doswindows

FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD c

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.07 - Multiple Vulnerabilities

CVE-2007-5311—webappsphp

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

PGOSD - '/misc/function.php3' Remote File Inclusion

CVE-2006-5543—webappsphp

PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD), when regi

23RISCO

abrir ↗

Referência✓ VexDay Proof

evilboard 0.1a - SQL Injection / Cross-Site Scripting

CVE-2008-0155—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

ContentNow 1.4.1 - Arbitrary File Upload / Cross-Site Scripting

CVE-2008-3181—webappsphp

Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - GDI+ '.ICO' Remote Division By Zero

CVE-2008-4327—doswindows

gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attacke

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox XSL - Parsing Remote Memory Corruption (PoC) (1)

CVE-2009-1169—dosmultiple

The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows r

28RISCO

abrir ↗

Referência✓ VexDay Proof

Moodle < 1.6.9/1.7.7/1.8.9/1.9.5 - File Disclosure

CVE-2009-1171—webappsphp

The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assist

23RISCO

abrir ↗

Referência✓ VexDay Proof

OWLLib 1.0 - 'OWLMemoryProperty.php' Remote File Inclusion

CVE-2006-6150—webappsphp

PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.