Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.644exploits catalogados
40.922CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.560Exploit-DB 24.489GitHub PoC 18.407VulnCheck XDB 11.064Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.644 exploits
Exploit-DB✓ VexDay Proof
firmCHANNEL Indoor & Outdoor Digital Signage 3.24 - Cross-Site Scripting
CVE-2008-4931—webappsphp04 nov 2008
Cross-site scripting (XSS) vulnerability in the account module in firmCHANNEL Digital Signage 3.24, and possibly earlier
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Struts 2.0.11 - Multiple Directory Traversal Vulnerabilities
CVE-2008-6505—remotemultiple04 nov 2008
Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote at
45RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WEBBDOMAIN WebShop 1.02 - SQL Injection / Cross-Site Scripting
CVE-2008-6628—webappsphp04 nov 2008
20RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
nicLOR Puglia Landscape - Local File Inclusion
CVE-2007-6586—webappsphp04 nov 2008
SQL injection vulnerability in sezione_news.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Simple Document Management System 1.1.4 - Authentication Bypass
CVE-2008-6236—webappsphp04 nov 2008
SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earli
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Vibro-CMS - Multiple SQL Injections
CVE-2008-6795—webappsphp04 nov 2008
SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DHCart 3.84 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
CVE-2008-6297—webappsphp04 nov 2008
Cross-site scripting (XSS) vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script o
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Acc Statistics 1.1 - Insecure Cookie Handling
CVE-2008-6293—webappsphp03 nov 2008
admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access b
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Acc Autos 4.0 - Insecure Cookie Handling
CVE-2008-6294—webappsphp03 nov 2008
admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Acc Real Estate 4.0 - Insecure Cookie Handling
CVE-2008-6294—webappsphp03 nov 2008
admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Acc Statistics 1.1 - Insecure Cookie Handling
CVE-2008-6292—webappsphp03 nov 2008
Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) usernam
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
pppBlog 0.3.11 - File Disclosure
CVE-2006-2770—webappsphp03 nov 2008
Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allow
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Acc Autos 4.0 - Insecure Cookie Handling
CVE-2008-6293—webappsphp03 nov 2008
admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access b
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Chilkat Crypt - ActiveX Arbitrary File Creation/Execution
CVE-2011-5289—remotewindows03 nov 2008
The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Acc Real Estate 4.0 - Insecure Cookie Handling
CVE-2008-6292—webappsphp03 nov 2008
Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) usernam
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Lynx 2.8 - '.mailcap'/'.mime.type' Local Code Execution
CVE-2006-7234—remotelinux03 nov 2008
Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious
23RISCO
abrir ↗
Metasploit600
Chilkat Crypt ActiveX WriteFile Unsafe Method
CVE-2008-5002—03 nov 2008
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilka
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
YourFreeWorld Downline Builder Pro - 'tr.php' SQL Injection
CVE-2008-4895—webappsphp02 nov 2008
SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Graugon PHP Article Publisher Pro 1.5 - Insecure Cookie Handling
CVE-2009-4808—webappsphp01 nov 2008
admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrativ
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
CVE-2008-4883—webappsphp01 nov 2008
SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
CVE-2008-4881—webappsphp01 nov 2008
SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
CVE-2008-4884—webappsphp01 nov 2008
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
CVE-2008-4882—webappsphp01 nov 2008
SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
CVE-2008-4900—webappsphp01 nov 2008
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GE Fanuc Real Time Information Portal 2.6 - 'writeFile()' API (Metasploit)
CVE-2008-0175—remotewindows01 nov 2008
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote at
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
CVE-2008-4895—webappsphp01 nov 2008
SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
YourFreeWorld Short Url & Url Tracker - SQL Injection
CVE-2008-4885—webappsphp01 nov 2008
SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpWebSite 0.9.3 - 'links.php' SQL Injection
CVE-2008-6266—webappsphp31 out 2008
SQL injection vulnerability in links.php in Appalachian State University phpWebSite allows remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Tribiq CMS 5.0.10a (Windows) - Local File Inclusion
CVE-2008-4893—webappsphp31 out 2008
Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Logz podcast CMS 1.3.1 - 'art' SQL Injection
CVE-2008-4896—webappsphp31 out 2008
Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote attackers to inject arb
23RISCO
abrir ↗
← anteriorpágina 1541 / 2.955próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.