Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

WordPress Plugin fMoblog 2.1 - 'id' SQL Injection

CVE-2009-0968—webappsphp

SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

iziContents rc6 - Local/Remote File Inclusion

CVE-2005-4600—webappsphp

Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

KnowledgeBuilder 2.2 - 'visEdit_root' Remote File Inclusion

CVE-2006-5919—webappsphp

PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

addalink 4 Beta - Write Approved Links

CVE-2008-4146—webappsphp

Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field

23RISCO

abrir ↗

Referência✓ VexDay Proof

YAP 1.1.1 - Blind SQL Injection / SQL Injection

CVE-2009-1038—webappsphp

Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

DBGuestbook 1.1 - 'dbs_base_path' Remote File Inclusion

CVE-2007-1165—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3425—webappsphp

Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion

CVE-2008-1651—webappsphp

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

gapicms 9.0.2 - 'dirDepth' Remote File Inclusion

CVE-2008-3183—webappsphp

PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX Random Ad 1.3 - Remote File Inclusion

CVE-2008-3401—webappsphp

PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hotel Reservation System - 'city.asp' Blind SQL Injection

CVE-2008-4204—webappsasp

SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

BS.Player 2.34 - '.bsl' Universal Overwrite (SEH)

CVE-2009-1068—localwindows

Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote

28RISCO

abrir ↗

Referência✓ VexDay Proof

BS.Player 2.34 Build 980 - '.bsl' Local Buffer Overflow (SEH)

CVE-2009-1068—localwindows

Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote

28RISCO

abrir ↗

Referência✓ VexDay Proof

ExBB 0.22 - Local/Remote File Inclusion

CVE-2008-1862—webappsphp

ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mantis Bug Tracker 1.1.1 - Code Execution / Cross-Site Scripting / Cross-Site Request Forgery

CVE-2008-2276—webappsphp

Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to cre

23RISCO

abrir ↗

Referência✓ VexDay Proof

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities

CVE-2008-4318—webappsphp

Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query

28RISCO

abrir ↗

Referência✓ VexDay Proof

GeoVision LiveAudio - ActiveX Remote Freed-Memory Access

CVE-2009-1092—remotewindows

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR syst

23RISCO

abrir ↗

Referência✓ VexDay Proof

BBClone 0.31 - 'selectlang.php' Remote File Inclusion

CVE-2007-0508—webappsphp

PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

AT Contenator 1.0 - 'Root_To_Script' Remote File Inclusion

CVE-2007-0983—webappsphp

PHP remote file inclusion vulnerability in _admin/nav.php in AT Contenator 1.0 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

IntelliTamper 2.07 - HTTP Header Remote Code Execution

CVE-2008-3361—remotewindows

Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Serv

23RISCO

abrir ↗

Referência✓ VexDay Proof

cPanel 11.x - 'Fantastico' Local File Inclusion

CVE-2008-4181—webappsphp

Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for c

23RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP - 'Upload' Remote Code Execution

CVE-2008-6201—webappsphp

Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module calsnails 1.06 - 'mx_common.php' File Inclusion

CVE-2006-6065—webappsphp

PHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module for MxBB Portal 1.06 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

zeeproperty 1.0 - Arbitrary File Upload / Cross-Site Scripting

CVE-2008-6914—webappsphp

Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Camera Life 2.6.2b4 - Arbitrary File Upload

CVE-2008-4366—webappsphp

Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'zip-notify' Remote Kernel Overflow (PoC)

CVE-2009-1236—dososx

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlexCMS Calendar - 'itemID' Blind SQL Injection

CVE-2009-1256—webappsphp

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId para

23RISCO

abrir ↗

Referência✓ VexDay Proof

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

CVE-2009-2182—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cartweaver 2.16.11 - 'ProdID' SQL Injection

CVE-2006-2046—webappscgi

Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

OPENi-CMS 1.0.1beta - 'config' Remote File Inclusion

CVE-2006-4750—webappsphp

PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, all

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.