Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Texas Imperial Software WFTPD 3.23 - 'SIZE' Remote Buffer Overflow

CVE-2006-4318—remotewindows

Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

50RISCO

abrir ↗

Referência✓ VexDay Proof

SerWeb 2.0.0 dev1 2007-02-20 - Multiple Local/Remote File Inclusion Vulnerabilities

CVE-2007-6289—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

HP Compaq Notebooks - ActiveX Remote Code Execution

CVE-2007-6333—remotewindows

The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 i

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow

CVE-2007-6335—remotelinux

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW

28RISCO

abrir ↗

Referência✓ VexDay Proof

BinGo News 3.01 - 'bnrep' Remote File Inclusion

CVE-2006-4648—webappsphp

PHP remote file inclusion vulnerability in bp_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.01.01 - Database Backup Download

CVE-2006-4782—webappsphp

src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authe

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCalendar 1.2.4 - Remote Code Execution

CVE-2012-1495—webappsphp

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user

60RISCO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.00 - 'search.php?search' SQL Injection

CVE-2007-2600—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

aeDating 4.1 - dir[inc] Remote File Inclusion

CVE-2006-4870—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

LulieBlog 1.02 - SQL Injection

CVE-2008-0446—webappsphp

SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mihalism Multi Forum Host 3.0.x - Remote File Inclusion

CVE-2007-6657—webappsphp

PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

oneSCHOOL - 'admin/login.asp' SQL Injection

CVE-2007-6665—webappsasp

SQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

KGB 1.87 - Local File Inclusion / Remote Code Execution

CVE-2006-5115—webappsphp

Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary loc

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyWebmin 1.0 - 'window.php' Remote File Inclusion

CVE-2006-5124—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyWebmin 1.0 - 'window.php' Remote File Inclusion

CVE-2006-5125—webappsphp

Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmallNuke 2.0.4 - Pass Recovery SQL Injection

CVE-2008-0147—webappsphp

SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpdaily - SQL Injection / Cross-Site Scripting / Local File Download

CVE-2008-4757—webappsphp

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the (1)

23RISCO

abrir ↗

Referência✓ VexDay Proof

FAQ Manager 1.2 - 'categorie.php' SQL Injection

CVE-2008-5287—webappsphp

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

CCProxy 6.2 - Telnet Proxy Ping Overflow (Metasploit)

CVE-2004-2685—remotewindows

Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long addre

28RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Multiple Vulnerabilities

CVE-2004-1553—webappsasp

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the usern

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vlog System 1.1 - SQL Injection

CVE-2008-6111—webappsphp

SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Download-Engine 1.4.2 - 'spaw' Remote File Inclusion

CVE-2006-5291—webappsphp

PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cdsagenda 4.2.9 - 'SendAlertEmail.php' File Inclusion

CVE-2006-5384—webappsphp

PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultrastats 0.2.144/0.3.11 - 'serverid' SQL Injection

CVE-2008-6260—webappsphp

SQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apoll 0.7b - Authentication Bypass

CVE-2008-6270—webappsphp

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

YaBBSM 3.0.0 - 'Offline.php' Remote File Inclusion

CVE-2006-5413—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apoll 0.7b - Authentication Bypass

CVE-2008-6272—webappsphp

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Multiple Membership Script 2.5 - 'id' SQL Injection

CVE-2008-6362—webappsphp

SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 - 'include()' Remote File Upload

CVE-2004-2262—webappsphp

ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Brim 1.2.1 - 'renderer' Multiple Remote File Inclusions

CVE-2006-5429—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execu

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.