Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

actSite 1.991 Beta - 'base.php' Remote File Inclusion

CVE-2007-5175—webappsphp

PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlexPHPDirectory 0.0.1 - Authentication Bypass

CVE-2008-6749—webappsphp

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disabl

23RISCO

abrir ↗

Referência✓ VexDay Proof

eDNews 2.0 - Local File Inclusion

CVE-2008-5819—webappsphp

Directory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Module Arcade 1.0 - 'cid' SQL Injection

CVE-2007-1978—webappsphp

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

ourvideo CMS 9.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

CVE-2008-2978—webappsphp

Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when register_globals is enabled, allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rianxosencabos CMS 0.9 - Arbitrary Add Admin

CVE-2008-4245—webappsphp

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authent

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities

CVE-2008-5878—webappsphp

Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quote

23RISCO

abrir ↗

Referência✓ VexDay Proof

yourplace 1.0.2 - Multiple Vulnerabilities / Remote Code Execution

CVE-2008-6773—webappsphp

Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authen

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole 2.1.0 - 'viewsource.php' Remote File Disclosure

CVE-2008-1857—webappsphp

Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

2532/Gigs 1.2.2 Stable - Multiple Vulnerabilities

CVE-2008-6901—webappsphp

Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when register_globals is enabled and

23RISCO

abrir ↗

Referência✓ VexDay Proof

SiteAdmin CMS - 'art' SQL Injection

CVE-2008-3414—webappsphp

SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPRunner 4.2 - 'SearchOption' Blind SQL Injection

CVE-2009-0964—webappsphp

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows at

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentVolve 1.4 - 'deleteTorrent' Delete Arbitrary File

CVE-2009-2101—webappsphp

Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

e-Vision CMS 2.0.2 - Multiple Local File Inclusions

CVE-2008-6551—webappsphp

Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magic_quotes_gpc is disabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

ftp Admin 0.1.0 - Local File Inclusion / Cross-Site Scripting / Authentication Bypass

CVE-2007-6233—webappsphp

Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

EkinBoard 1.1.0 - Arbitrary File Upload / Authentication Bypass

CVE-2008-7156—webappsphp

EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain

23RISCO

abrir ↗

Referência✓ VexDay Proof

XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

CVE-2008-3399—webappsphp

PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when register_globals

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAbook 0.8.8b - 'cookie' Local File Inclusion

CVE-2008-4490—webappsphp

Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magic_quotes_gpc is disabled, a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PunBB Mod PunPortal 0.1 - Local File Inclusion

CVE-2008-5418—webappsphp

Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to i

23RISCO

abrir ↗

Referência✓ VexDay Proof

NotFTP 1.3.1 - 'newlang' Local File Inclusion

CVE-2009-1407—webappsphp

Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

TransLucid 1.75 - Multiple Vulnerabilities

CVE-2009-2145—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência✓ VexDay Proof

ContentNow 1.39 - 'pageid' SQL Injection

CVE-2006-6157—webappsphp

SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

bcoos 1.0.10 - Local File Inclusion / SQL Injection

CVE-2007-6079—webappsphp

Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows XP/2003 - 'afd.sys' Local Privilege Escalation (K-plugin) (MS08-066)

CVE-2008-3464—localwindows

afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1

23RISCO

abrir ↗

Referência✓ VexDay Proof

bcoos 1.0.13 - 'viewcat.php' SQL Injection

CVE-2008-6381—webappsphp

SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authent

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easy Photo Gallery 2.1 - Cross-Site Scripting / File Disclosure/Bypass / SQL Injection

CVE-2008-6988—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

InstaGuide Weather Script 1.0 - 'index.php' Local File Inclusion

CVE-2007-5674—webappsphp

Directory traversal vulnerability in index.php in InstaGuide Weather (aka Weather for PHP) 1.0, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência✓ VexDay Proof

SetCMS 3.6.5 - Remote Command Execution

CVE-2008-0478—webappsphp

Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Feed CMS 1.07.03.19b - 'lang' Local File Inclusion

CVE-2008-6361—webappsphp

Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

TopperMod 1.0 - 'mod.php' Local File Inclusion

CVE-2008-1553—webappsphp

Directory traversal vulnerability in mod.php in TopperMod 1.0 allows remote attackers to include and execute arbitrary l

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.