Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.183exploits catalogados

37.028CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.320VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Ask.com/AskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow

CVE-2007-5107—remotewindows

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media

50RISCO

abrir ↗

Referência✓ VexDay Proof

Chupix CMS 0.2.3 - 'repertoire' Remote File Inclusion

CVE-2007-5139—webappsphp

PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when register_globals is enabled, a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SyntaxCMS 1.3 - 'FCKeditor' Arbitrary File Upload

CVE-2007-5156—webappsphp

Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.

23RISCO

abrir ↗

Referência✓ VexDay Proof

actSite 1.56 - 'news.php' Local File Inclusion

CVE-2007-5174—webappsphp

Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module eBoard 1.0.7 - GLOBALS[name] Local File Inclusion

CVE-2007-1934—webappsphp

Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Rha7 Downloads 1.0 - 'visit.php' SQL Injection

CVE-2007-1960—webappsphp

SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other

23RISCO

abrir ↗

Referência✓ VexDay Proof

MD-Pro 1.0.76 - SQL Injection

CVE-2007-5222—webappsphp

SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak

CVE-2007-5225—localsolaris

Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the co

23RISCO

abrir ↗

Referência✓ VexDay Proof

PMOS Help Desk 2.4 - Remote Command Execution

CVE-2007-6550—webappsphp

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ossigeno CMS 2.2a3 - 'footer.php' Remote File Inclusion

CVE-2007-5234—webappsphp

PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers t

35RISCO

abrir ↗

Referência✓ VexDay Proof

Simple CMS 1.0.3 - 'area' SQL Injection

CVE-2008-0835—webappsphp

SQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Live! 3.2.2 - 'questid' SQL Injection (1)

CVE-2008-0821—webappsphp

SQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Phpjobscheduler 3.0 - 'installed_config_file' File Inclusion

CVE-2006-5928—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Phpjobscheduler 3.0 allow remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

RsGallery2 < 1.11.2 - 'rsgallery.html.php' File Inclusion

CVE-2006-6962—webappsphp

PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Faethon 2.2 Ultimate - Remote File Inclusion / Cross-Site Scripting

CVE-2008-2127—webappsphp

Cross-site scripting (XSS) vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

NULL FTP Server 1.1.0.7 - 'Site' Command Injection

CVE-2008-6534—remotewindows

Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

CentiPaid 1.4.2 - 'centipaid_class.php' Remote File Inclusion

CVE-2006-6976—webappsphp

PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Weblogicnet - 'files_dir' Multiple Remote File Inclusions

CVE-2007-4715—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Weblogicnet allow remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-2181—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Web Hosting Directory - Multiple Vulnerabilities

CVE-2008-6940—webappsphp

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, whi

23RISCO

abrir ↗

Referência✓ VexDay Proof

pivot 1.40.4-7 - Multiple Vulnerabilities

CVE-2009-2133—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

DFF PHP Framework API - 'Data Feed File' Remote File Inclusion

CVE-2008-4502—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DataFeedFile (DFF) PHP Framework API allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Mod Classifieds - 'lid' SQL Injection

CVE-2008-5197—webappsphp

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

zKup CMS 2.0 < 2.3 - Arbitrary File Upload

CVE-2008-7123—webappsphp

Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

MailEnable 3.13 SMTP Service - 'VRFY/EXPN' Denial of Service

CVE-2008-1275—doswindows

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x an

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCalendar 0.9.45 - 'includedir' Remote File Inclusion

CVE-2007-1483—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Student Study Center Management System v1.0 - Stored Cross-Site Scripting (XSS)

CVE-2023-33580—webappsphp

Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in the "Admin Name" f

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCards 1.3 - SQL Injection

CVE-2008-4878—webappsphp

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated admi

23RISCO

abrir ↗

Referência✓ VexDay Proof

work system E-Commerce 3.0.5 - Remote File Inclusion

CVE-2007-1423—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Viewpoint Media Player for IE 3.2 - Remote Stack Overflow (PoC)

CVE-2007-5911—doswindows

Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Medi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.