Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

PHPRaid < 3.0.7 - 'rss.php?PHPraid_dir' Remote File Inclusion

CVE-2006-3317—webappsphp

PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in

28RISCO

abrir ↗

Referência✓ VexDay Proof

NetVIOS 2.0 - 'page.asp' SQL Injection

CVE-2006-5954—webappsasp

SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

vBulletin 3.6.4 - 'inlinemod.php?postids' SQL Injection

CVE-2007-1292—webappsphp

SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, mi

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpDatingClub 3.7 - SQL Injection / Cross-Site Scripting Injection

CVE-2009-2178—webappsphp

Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenLD 1.2.2 - 'index.php?id' SQL Injection

CVE-2007-3682—webappsphp

SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

AdaptCMS Lite 1.3 - Blind SQL Injection

CVE-2008-4524—webappsphp

SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - 'Client-IP' SQL Injection

CVE-2007-0971—webappsphp

Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

HC Newssystem 1.0-1.4 - 'index.php?ID' SQL Injection

CVE-2007-1417—webappsphp

SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashGameScript 1.7 - 'user' SQL Injection

CVE-2007-3646—webappsphp

SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACG News 1.0 - 'aid'/'catid' SQL Injection

CVE-2007-4603—webappsphp

Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

team 1.x - File Disclosure / Cross-Site Scripting

CVE-2009-0761—webappsasp

Cross-site scripting (XSS) vulnerability in online.asp in Team Board 1.x allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

Frogss CMS 0.7 - SQL Injection

CVE-2007-2299—webappsphp

Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tiger PHP News System 1.0b build 39 - SQL Injection

CVE-2008-0469—webappsphp

SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

eXV2 Module bamaGalerie 3.03 - SQL Injection

CVE-2008-1349—webappsphp

SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBP RC3 (2.204) FIX4 - SQL Injection

CVE-2008-1408—webappsphp

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Autodealers CMS AutOnline - 'pageid' SQL Injection

CVE-2008-4073—webappsphp

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

ProfileCMS 1.0 - 'id' SQL Injection

CVE-2007-6058—webappsphp

Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection

CVE-2007-6656—webappsphp

SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Brim 2.0.0 - SQL Injection / Cross-Site Scripting

CVE-2008-4083—webappsphp

Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Stats Generator 2.1.1 - SQL Injection

CVE-2006-3580—webappsasp

SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Forum 1.0 - 'topic_title.php' SQL Injection

CVE-2007-1295—webappsphp

SQL injection vulnerability in topic_title.php in AJ Forum 1.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

JobSitePro 1.0 - 'search.php' SQL Injection

CVE-2007-1428—webappsphp

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Camportail 1.1 - 'camid' SQL Injection

CVE-2007-1808—webappsphp

SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpNews 2.40.01 - 'newnr' SQL Injection

CVE-2007-2750—webappsphp

SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easybe 1-2-3 Music Store - 'process.php' SQL Injection

CVE-2007-3520—webappsphp

SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

A-Blog 2.0 - Cross-Site Scripting / SQL Injection

CVE-2008-0676—webappsphp

Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPFootball 1.6 - Remote Hash Disclosure

CVE-2009-0711—webappsphp

filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Acco

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Classifieds 7.1 - 'index.php' SQL Injection

CVE-2006-5208—webappsphp

Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Online Web Building 2.0 - 'id' SQL Injection

CVE-2007-1058—webappsasp

SQL injection vulnerability in user_pages/page.asp in Online Web Building 2.0 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Minerva Mod 2.0.21 build 238a - SQL Injection

CVE-2007-1555—webappsphp

SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attack

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.