Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.644exploits catalogados
40.922CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.560Exploit-DB 24.489GitHub PoC 18.407VulnCheck XDB 11.064Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.644 exploits
Exploit-DB✓ VexDay Proof
Tr Script News 2.1 - 'news.php' Cross-Site Scripting
CVE-2008-2508—webappsphp27 mai 2008
Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary w
23RISCO
abrir ↗
Metasploit300
EMC AlphaStor Library Manager Arbitrary Command Execution
CVE-2008-2157—27 mai 2008
robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands
30RISCO
abrir ↗
Metasploit300
EMC AlphaStor Device Manager Arbitrary Command Execution
CVE-2008-2157—27 mai 2008
robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands
30RISCO
abrir ↗
Metasploit500
EMC AlphaStor Agent Buffer Overflow
CVE-2008-2158—27 mai 2008
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campus Bulletin Board 3.4 - '/post3/book.asp?review' Cross-Site Scripting
CVE-2008-2493—webappsasp26 mai 2008
Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to injec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ClassSystem 2.0/2.3 - 'class/ApplyDB.php' Unrestricted Arbitrary File Upload / Arbitrary Code Execution
CVE-2008-6619—webappsphp26 mai 2008
Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPFix 2.0 - '/auth/00_pass.php?account' SQL Injection
CVE-2008-2479—webappsphp26 mai 2008
Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (1
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
AbleSpace 1.0 - 'adv_cat.php' SQL Injection
CVE-2008-2491—webappsphp26 mai 2008
SQL injection vulnerability in adv_cat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campus Bulletin Board 3.4 - '/post3/book.asp?review' SQL Injection
CVE-2008-2492—webappsasp26 mai 2008
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ClassSystem 2.0/2.3 - 'HomepageTop.php?teacher_id' SQL Injection
CVE-2008-6618—webappsphp26 mai 2008
Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Excuse Online - 'pwd.asp' SQL Injection
CVE-2008-2509—webappsasp26 mai 2008
SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ClassSystem 2.0/2.3 - 'HomepageMain.php?teacher_id' SQL Injection
CVE-2008-6618—webappsphp26 mai 2008
Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ClassSystem 2.0/2.3 - 'MessageReply.php?teacher_id' SQL Injection
CVE-2008-6618—webappsphp26 mai 2008
Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campus Bulletin Board 3.4 - '/post3/view.asp?id' SQL Injection
CVE-2008-2492—webappsasp26 mai 2008
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPFix 2.0 - '/fix/browse.php?kind' SQL Injection
CVE-2008-2479—webappsphp26 mai 2008
Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (1
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
miniCWB 2.1.1 - 'connector.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-6620—webappsphp26 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/php
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DZOIC Handshakes 3.5 - 'fname' SQL Injection
CVE-2008-2781—webappsphp24 mai 2008
SQL injection vulnerability in index.php in DZOIC Handshakes 3.5 allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Horde Multiple Product - 'day.php?Timestamp' Cross-Site Scripting
CVE-2008-2783—webappsphp24 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow r
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Upload File - 'wp-uploadfile.php' SQL Injection
CVE-2008-2510—webappsphp24 mai 2008
SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows remote attackers to exec
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Horde Multiple Product - 'workweek.php?Timestamp' Cross-Site Scripting
CVE-2008-2783—webappsphp24 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow r
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Horde Multiple Product - 'week.php?Timestamp' Cross-Site Scripting
CVE-2008-2783—webappsphp24 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow r
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal
CVE-2008-1881—localwindows23 mai 2008
Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPFreeForum 1.0 rc2 - 'error.php?message' Cross-Site Scripting
CVE-2008-6437—webappsphp22 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpSQLiteCMS 1 RC2 - '/cms/includes/login.inc.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-6435—webappsphp22 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Barracuda Spam Firewall 3.5.11 - 'ldap_test.cgi' Cross-Site Scripting
CVE-2008-2333—remotehardware22 mai 2008
Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Safari Montage 3.1.3 - 'forgotPW.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-6637—webappsphp22 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpSQLiteCMS 1 RC2 - '/cms/includes/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-6435—webappsphp22 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BMForum 5.6 - 'index.php' Cross-Site Scripting
CVE-2008-6431—webappsphp22 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPFreeForum 1.0 rc2 - '/part/menu.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-6437—webappsphp22 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BMForum 5.6 - 'bsd01header.php' Cross-Site Scripting
CVE-2008-6431—webappsphp22 mai 2008
Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗
← anteriorpágina 1562 / 2.955próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.