Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

FlexCMS Calendar - 'itemID' Blind SQL Injection

CVE-2009-1256—webappsphp

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId para

23RISCO

abrir ↗

Referência✓ VexDay Proof

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

CVE-2009-2182—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cartweaver 2.16.11 - 'ProdID' SQL Injection

CVE-2006-2046—webappscgi

Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

OPENi-CMS 1.0.1beta - 'config' Remote File Inclusion

CVE-2006-4750—webappsphp

PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

KGB 1.9 - 'sesskglogadmin.php' Local File Inclusion

CVE-2007-0337—webappsphp

Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aktueldownload Haber scripti - 'id' SQL Injection

CVE-2007-1015—webappsasp

SQL injection vulnerability in HaberDetay.asp in Aktueldownload Haber script allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module AddressBook 1.2 - Local File Inclusion

CVE-2007-1720—webappsphp

Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

public media manager 1.3 - Remote File Inclusion

CVE-2007-5149—webappsphp

PHP remote file inclusion vulnerability in NewsCMS/news/newstopic_inc.php in North Country Public Radio Public Media Man

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eserv 3.x - FTP Server (ABOR) Remote Stack Overflow (PoC)

CVE-2008-4588—doswindows

Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a deni

23RISCO

abrir ↗

Referência✓ VexDay Proof

Stash 1.0.3 - SQL Injection User Credentials Disclosure

CVE-2008-4590—webappsphp

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) t

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebSVN 2.0 - Cross-Site Scripting / File Handling / Code Execution

CVE-2008-5920—webappsphp

The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a craft

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crysis 1.1.1.5879 - Remote Format String Denial of Service (PoC)

CVE-2008-1127—doswindows

Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASX to MP3 Converter 3.0.0.7 - '.m3u' Universal Stack Overflow

CVE-2009-1324—localwindows

Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary cod

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-stream Ripper - '.m3u' Local Stack Overflow (PoC)

CVE-2009-1325—doswindows

Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long U

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClaSS 0.8.60 - 'export.php' Local File Inclusion

CVE-2008-5856—webappsphp

Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

MODx CMS 0.9.2.1 - 'FCKeditor' Remote File Inclusion

CVE-2006-5730—webappsphp

PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS

23RISCO

abrir ↗

Referência✓ VexDay Proof

Durian Web Application Server 3.02 - Remote Buffer Overflow

CVE-2006-6853—remotewindows

Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Lanius CMS 1.2.16 - 'FCKeditor' Arbitrary File Upload

CVE-2007-5156—webappsphp

Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ax Developer CMS 0.1.1 - 'index.php?module' Local File Inclusion

CVE-2007-5820—webappsphp

Directory traversal vulnerability in index.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

eLineStudio Site Composer (ESC) 2.6 - Multiple Vulnerabilities

CVE-2008-2861—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

pPIM 1.0 - Arbitrary File Delete / Cross-Site Scripting

CVE-2008-4425—webappsphp

Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Classified - 'ID' SQL Injection

CVE-2008-6157—webappsasp

SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent at

23RISCO

abrir ↗

Referência✓ VexDay Proof

eNdonesia 8.4 - '/mod.php/friend.php/admin.php' Multiple Vulnerabilities

CVE-2006-6872—webappsphp

Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Azimyt CMS 0.22 - 'lang' Local File Inclusion

CVE-2008-2820—webappsphp

Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

RoseOnlineCMS 3 beta2 - 'op' Local File Inclusion

CVE-2007-1636—webappsphp

Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Grestul 1.2 - Remote Add Administrator Account

CVE-2009-2040—webappsphp

admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote attackers to bypass authenticati

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sendcard 3.4.1 - Local File Inclusion / Remote Code Execution

CVE-2007-3082—webappsphp

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities

CVE-2008-4750—remotewindows

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, po

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-stream RM-MP3 Converter 3.0.0.7 - '.m3u' Local Stack Overflow

CVE-2009-1328—localwindows

Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

PH Pexplorer 0.24 - 'explorer_load_lang.php' Local File Inclusion

CVE-2006-5510—webappsphp

Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.