Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.644exploits catalogados

40.922CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.560Exploit-DB 24.489GitHub PoC 18.407VulnCheck XDB 11.064Nuclei 4.584Metasploit 3.540✓ só verificadosrecentes populares risco

88.644 exploits

Exploit-DB✓ VexDay Proof

V-Webmail 1.6.4 - '/includes/pear/File.php?CONFIG[pear_dir]' Remote File Inclusion

CVE-2008-6840—webappsphp10 jul 2008

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP co

23RISCO

Exploit-DB✓ VexDay Proof

V-Webmail 1.6.4 - '/includes/pear/System.php?CONFIG[pear_dir]' Remote File Inclusion

CVE-2008-6840—webappsphp10 jul 2008

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP co

23RISCO

Exploit-DB✓ VexDay Proof

V-Webmail 1.6.4 - '/includes/pear/XML/parser.php?CONFIG[pear_dir]' Remote File Inclusion

CVE-2008-6840—webappsphp10 jul 2008

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP co

23RISCO

Exploit-DB✓ VexDay Proof

V-Webmail 1.6.4 - '/includes/pear/XML/Tree.php?CONFIG[pear_dir]' Remote File Inclusion

CVE-2008-6840—webappsphp10 jul 2008

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP co

23RISCO

Exploit-DB✓ VexDay Proof

V-Webmail 1.6.4 - '/includes/pear/Log.php?CONFIG[pear_dir]' Remote File Inclusion

CVE-2008-6840—webappsphp10 jul 2008

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP co

23RISCO

Exploit-DB✓ VexDay Proof

FFmpeg libavformat - 'psxstr.c' STR Data Heap Buffer Overflow

CVE-2008-3162—doslinux09 jul 2008

Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remot

23RISCO

Exploit-DB✓ VexDay Proof

PageFusion 1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2008-3201—webappsphp09 jul 2008

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbi

23RISCO

Exploit-DB✓ VexDay Proof

TGS Content Management 0.3.2r2 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2008-6839—webappsphp09 jul 2008

Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject a

23RISCO

Metasploit0

Trixbox langChoice PHP Local File Inclusion

CVE-2008-6825—09 jul 2008

Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to

43RISCO

Exploit-DB✓ VexDay Proof

TGS Content Management 0.3.2r2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2008-6839—webappsphp09 jul 2008

Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject a

23RISCO

Exploit-DB✓ VexDay Proof

Xomol CMS 1.2 - '/index.php' HTML Injection / Cross-Site Scripting

CVE-2008-3202—webappsphp09 jul 2008

Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web s

23RISCO

Exploit-DB✓ VexDay Proof

Boonex Dolphin 6.1.2 - Multiple Remote File Inclusions

CVE-2008-3166—webappsphp08 jul 2008

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals i

23RISCO

Exploit-DB✓ VexDay Proof

vBulletin 3.7.1 - 'admincp/faq.php?Injection adminlog.php' Cross-Site Scripting

CVE-2008-3184—webappsphp08 jul 2008

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x ver

23RISCO

Exploit-DB✓ VexDay Proof

Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities

CVE-2008-3076—remotelinux07 jul 2008

The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell meta

23RISCO

Exploit-DB✓ VexDay Proof

DodosMail 2.5 - 'dodosmail.php' Local File Inclusion

CVE-2008-3163—webappsphp07 jul 2008

Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbit

23RISCO

Exploit-DB✓ VexDay Proof

Fuzzylime (cms) 3.01 - 'blog.php' Local File Inclusion

CVE-2008-3164—webappsphp07 jul 2008

Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote

23RISCO

Exploit-DB✓ VexDay Proof

PHP-Nuke 4ndvddb 0.91 Module - 'id' SQL Injection

CVE-2008-3151—webappsphp07 jul 2008

SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL com

23RISCO

Exploit-DB✓ VexDay Proof

Zoph 0.7.2.1 - 'search.php?_off' Cross-Site Scripting

CVE-2008-6838—webappsphp07 jul 2008

Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web s

23RISCO

Exploit-DB✓ VexDay Proof

Zoph 0.7.2.1 - SQL Injection

CVE-2008-6837—webappsphp07 jul 2008

SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified ve

23RISCO

Metasploit600

Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download

CVE-2008-2463—07 jul 2008

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snaps

50RISCO

Metasploit200

OpenTFTP SP 1.4 Error Packet Overflow

CVE-2008-2161—05 jul 2008

Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execut

50RISCO

Exploit-DB✓ VexDay Proof

Novell Groupwise Messenger 2.0 Client - Buffer Overflow

CVE-2008-2703—dosnovell02 jul 2008

Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow rem

50RISCO

Metasploit300

Novell GroupWise Messenger Client Buffer Overflow

CVE-2008-2703—02 jul 2008

Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow rem

50RISCO

Exploit-DB✓ VexDay Proof

QNX Neutrino RTOS 6.3 - 'phgrafx' Local Buffer Overflow

CVE-2008-3024—dosunix01 jul 2008

Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileg

23RISCO

Exploit-DB✓ VexDay Proof

RSS-aggregator 1.0 - 'IdTag' SQL Injection

CVE-2008-3034—webappsphp30 jun 2008

Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi

23RISCO

Exploit-DB✓ VexDay Proof

Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)

CVE-2008-2859—doswindows30 jun 2008

Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial

23RISCO

Exploit-DB✓ VexDay Proof

RSS-aggregator 1.0 - 'IdFlux' SQL Injection

CVE-2008-3034—webappsphp30 jun 2008

Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi

23RISCO

Exploit-DB✓ VexDay Proof

IBM Tivoli Directory Server 6.1.x - Adding 'ibm-globalAdminGroup' Entry Denial of Service

CVE-2008-2943—dosmultiple30 jun 2008

Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated admi

23RISCO

Exploit-DB✓ VexDay Proof

FaName 1.0 - 'page.php?name' Cross-Site Scripting

CVE-2007-3653—webappsphp30 jun 2008

Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to

23RISCO

Exploit-DB✓ VexDay Proof

OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service

CVE-2008-2952—doslinux30 jun 2008

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via

28RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.