Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

phpFullAnnu 5.1 - 'repmod' Remote File Inclusion

CVE-2006-4644—webappsphp

PHP remote file inclusion vulnerability in modules/home.module.php in phpFullAnnu 5.1 and earlier allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Star FTP Server 1.10 - 'RETR' Remote Denial of Service

CVE-2006-6643—doswindows

Fightersoft Multimedia Star FTP server 1.10 allows remote attackers to cause a denial of service (crash) via multiple RE

23RISCO

abrir ↗

Referência✓ VexDay Proof

photokron 1.7 - Remote Database Disclosure

CVE-2008-0297—webappsphp

PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

NewLife Blogger 3.0 - Insecure Cookie Handling / SQL Injection

CVE-2008-6180—webappsphp

SQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ascended Guestbook 1.0.0 - 'embedded.php' File Inclusion

CVE-2006-5531—webappsphp

PHP remote file inclusion vulnerability in embedded.php in Ascended Guestbook 1.0.0 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

FishCart 3.2 RC2 - 'fc_example.php' Remote File Inclusion

CVE-2007-4287—webappsphp

PHP remote file inclusion vulnerability in fc_functions/fc_example.php in FishCart 3.2 RC2 and earlier allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple HTTPd 1.38 - Multiple Vulnerabilities

CVE-2007-6405—remotewindows

Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI progra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mapbender 2.4.4 - 'gaz' SQL Injection

CVE-2008-0301—webappsphp

Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

MycroCMS 0.5 - Blind SQL Injection

CVE-2008-2770—webappsphp

SQL injection vulnerability in index.php in MycroCMS 0.5, when magic_quotes_gpc is disabled, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

eLineStudio Site Composer (ESC) 2.6 - Multiple Vulnerabilities

CVE-2008-2862—webappsphp

Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pakupaku CMS 0.4 - Arbitrary File Upload / Local File Inclusion

CVE-2007-4641—webappsphp

Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting

CVE-2007-6488—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Basic-CMS - SQL Injection

CVE-2008-2789—webappsphp

SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands vi

43RISCO

abrir ↗

Referência✓ VexDay Proof

Comparison Engine Power 1.0 - Blind SQL Injection

CVE-2008-2791—webappsphp

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.1A1 - 'mini.php' Local File Inclusion

CVE-2008-4718—webappsphp

Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.1A1 - Local File Inclusion

CVE-2008-4718—webappsphp

Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yerba SACphp 6.3 - Multiple Vulnerabilities

CVE-2008-5873—webappsphp

Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galle

23RISCO

abrir ↗

Referência✓ VexDay Proof

ravennuke 2.3.0 - Multiple Vulnerabilities

CVE-2009-0673—webappsphp

Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.3

23RISCO

abrir ↗

Referência✓ VexDay Proof

CcMail 1.0.1 - 'functions_dir' Remote File Inclusion

CVE-2007-1516—webappsphp

PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

OWL Intranet Engine 0.82 - 'xrms_file_root' Code Execution

CVE-2006-1149—webappsphp

PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enabled

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeCMS.us 0.2 - 'index.php' SQL Injection

CVE-2008-2796—webappsphp

SQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

mystats - 'hits.php' Multiple Vulnerabilities

CVE-2008-4644—webappsphp

hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For H

23RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.45 - Multiple Vulnerabilities

CVE-2006-1347—webappsphp

SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

APC ActionApps CMS 2.8.1 - Remote File Inclusion

CVE-2006-2686—webappsphp

PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Socketwiz BookMarks 2.0 - 'root_dir' Remote File Inclusion

CVE-2006-7069—webappsphp

PHP remote file inclusion vulnerability in smarty_config.php in Socketwiz Bookmarks 2.0 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetProxy 4.03 - Web Filter Evasion / Bypass Logging

CVE-2007-1224—remotewindows

Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPEasyNews 1.13 RC2 - 'POST' SQL Injection

CVE-2008-2823—webappsphp

SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Site Lock 2.0 - Insecure Cookie Handling

CVE-2009-1587—webappsphp

index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by sett

23RISCO

abrir ↗

Referência✓ VexDay Proof

DM FileManager 3.9.2 - Insecure Cookie Handling

CVE-2009-2025—webappsphp

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpleBlog 2.0 - 'comments.asp' SQL Injection (1)

CVE-2006-4300—webappsasp

SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.