Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

FreeLyrics 1.0 - Remote File Disclosure

CVE-2008-5861—webappsphp

Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via di

23RISCO

abrir ↗

Referência✓ VexDay Proof

V-Webmail 1.6.4 - 'pear_dir' Remote File Inclusion

CVE-2006-2666—webappsphp

PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Visagesoft eXPert PDF EditorX - 'VSPDFEditorX.ocx' Insecure Method

CVE-2008-6496—doswindows

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT

23RISCO

abrir ↗

Referência✓ VexDay Proof

mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities

CVE-2009-2080—webappsphp

admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Project Based Calendaring System (PBCS) 0.7.1 - Multiple Vulnerabilities

CVE-2008-2215—webappsphp

Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

SG Real Estate Portal 2.0 - Blind SQL Injection / Local File Inclusion

CVE-2008-6010—webappsphp

Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Minigal b13 - Remote File Disclosure

CVE-2008-6933—webappsphp

Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code

23RISCO

abrir ↗

Referência✓ VexDay Proof

BbZL.php 0.92 - 'lien_2' Local Directory Traversal

CVE-2008-4707—webappsphp

Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthorized directori

23RISCO

abrir ↗

Referência✓ VexDay Proof

ComVironment 4.0 - 'grab_globals.lib.php' Remote File Inclusion

CVE-2007-0395—webappsphp

PHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

VS-Link-Partner 2.1 - 'script_pfad' Remote File Inclusion

CVE-2007-1025—webappsphp

PHP remote file inclusion vulnerability in inc/functions_inc.php in VS-Link-Partner 2.1 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebKalk2 1.9.0 - 'absolute_path' Remote File Inclusion

CVE-2007-2307—webappsphp

PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.07 - Multiple Vulnerabilities

CVE-2007-5312—webappsphp

Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência✓ VexDay Proof

LiveAlbum 0.9.0 - 'common.php' Remote File Inclusion

CVE-2007-5315—webappsphp

PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remot

35RISCO

abrir ↗

Referência✓ VexDay Proof

Phaos R4000 Version - 'file' Remote File Disclosure

CVE-2008-1755—webappsphp

Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yerba SACphp 6.3 - Multiple Vulnerabilities

CVE-2008-5873—webappsphp

Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galle

23RISCO

abrir ↗

Referência✓ VexDay Proof

ravennuke 2.3.0 - Multiple Vulnerabilities

CVE-2009-0673—webappsphp

Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.3

23RISCO

abrir ↗

Referência✓ VexDay Proof

CcMail 1.0.1 - 'functions_dir' Remote File Inclusion

CVE-2007-1516—webappsphp

PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

OWL Intranet Engine 0.82 - 'xrms_file_root' Code Execution

CVE-2006-1149—webappsphp

PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enabled

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeCMS.us 0.2 - 'index.php' SQL Injection

CVE-2008-2796—webappsphp

SQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

mystats - 'hits.php' Multiple Vulnerabilities

CVE-2008-4644—webappsphp

hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For H

23RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.45 - Multiple Vulnerabilities

CVE-2006-1347—webappsphp

SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

APC ActionApps CMS 2.8.1 - Remote File Inclusion

CVE-2006-2686—webappsphp

PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Socketwiz BookMarks 2.0 - 'root_dir' Remote File Inclusion

CVE-2006-7069—webappsphp

PHP remote file inclusion vulnerability in smarty_config.php in Socketwiz Bookmarks 2.0 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetProxy 4.03 - Web Filter Evasion / Bypass Logging

CVE-2007-1224—remotewindows

Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPEasyNews 1.13 RC2 - 'POST' SQL Injection

CVE-2008-2823—webappsphp

SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Site Lock 2.0 - Insecure Cookie Handling

CVE-2009-1587—webappsphp

index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by sett

23RISCO

abrir ↗

Referência✓ VexDay Proof

DM FileManager 3.9.2 - Insecure Cookie Handling

CVE-2009-2025—webappsphp

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpleBlog 2.0 - 'comments.asp' SQL Injection (1)

CVE-2006-4300—webappsasp

SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Barman 0.0.1r3 - 'Interface.php' Remote File Inclusion

CVE-2006-6611—webappsphp

PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blog PixelMotion - 'sauvBase.php' Arbitrary Database Backup

CVE-2008-1868—webappsphp

admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote atta

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.