Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Joomla! Component PU Arcade 2.1.3 - SQL Injection

CVE-2007-6663—webappsphp

SQL injection vulnerability in (1) Puarcade.php and (2) PUarcade.html.php in Pragmatic Utopia PU Arcade (com_puarcade) 2

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMSbright - 'id_rub_page' SQL Injection

CVE-2008-6991—webappsphp

SQL injection vulnerability in public/page.php in Websens CMSbright allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection

CVE-2008-0440—webappsphp

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPRunner 4.2 - 'SearchOption' Blind SQL Injection

CVE-2009-0963—webappsphp

Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

DeluxeBB 1.2 - Multiple Vulnerabilities

CVE-2008-2195—webappsphp

Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrator

23RISCO

abrir ↗

Referência✓ VexDay Proof

Post Affiliate Pro 2.0 - 'md' Local File Inclusion

CVE-2008-4602—webappsphp

Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and p

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component iDoBlog b24 - SQL Injection

CVE-2008-2627—webappsphp

SQL injection vulnerability in the IDoBlog (com_idoblog) component b24 and earlier and 1.0, a component for Joomla!, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_Eventing 1.6.x - Blind SQL Injection

CVE-2009-0421—webappsphp

SQL injection vulnerability in the Eventing (com_eventing) 1.6.x component for Joomla! allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS 2.0.18 - Local File Inclusion / URL Redirecting

CVE-2008-0613—webappsphp

Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary we

23RISCO

abrir ↗

Referência✓ VexDay Proof

IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow (PoC)

CVE-2008-3360—doswindows

Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebFileExplorer 3.1 - Authentication Bypass

CVE-2009-1323—webappsphp

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

2DayBiz Business Community Script - Multiple Vulnerabilities

CVE-2009-1651—webappsphp

SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP121 Instant Messenger 1.4 - Remote Code Execution

CVE-2006-1828—webappsphp

SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpCommunityCalendar 4.0.3 - Cross-Site Scripting / SQL Injection

CVE-2006-2797—webappsphp

Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

OLIB 7 WebView 2.5.1.1 - 'infile' Local File Inclusion

CVE-2008-5678—webappsphp

Fretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive informati

23RISCO

abrir ↗

Referência✓ VexDay Proof

webEdition 6.0.0.4 - 'WE_LANGUAGE' Local File Inclusion

CVE-2009-1222—webappsphp

Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when register_globals is enabled and m

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickCart 2.0 - 'categories.php' Local File Inclusion

CVE-2006-6390—webappsphp

Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic

23RISCO

abrir ↗

Referência✓ VexDay Proof

unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities

CVE-2009-1948—webappsphp

Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals i

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Insert User Mod 0.1.2 - Remote File Inclusion

CVE-2006-7100—webappsphp

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0.1.2 and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crea-Book 1.0 - Admin Access Bypass / Database Disclosure / Code Execution

CVE-2007-2001—webappsphp

Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

W1L3D4 philboard 0.2 - 'W1L3D4_bolum.asp' SQL Injection

CVE-2007-2641—webappsasp

SQL injection vulnerability in W1L3D4_bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Openfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-6509—webappsjsp

SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

KISGB 5.1.1 - 'Authenticate.php' Remote File Inclusion

CVE-2006-6764—webappsphp

PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP thr

23RISCO

abrir ↗

Referência✓ VexDay Proof

ATutor 1.6.1-pl1 - 'import.php' Remote File Inclusion

CVE-2008-3368—webappsphp

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection

CVE-2008-6182—webappsphp

SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Peel Shopping 3.1 - 'rubid' SQL Injection

CVE-2008-6892—webappsphp

SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS Newbb_plus 0.92 - Client IP SQL Injection

CVE-2008-0224—webappsphp

SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component joovideo 1.2.2 - 'id' SQL Injection

CVE-2008-1460—webappsphp

SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Classifieds Script 05122008 - SQL Injection

CVE-2008-2453—webappsphp

Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

FizzMedia 1.51.2 - SQL Injection

CVE-2008-3378—webappsphp

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.