Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.678exploits catalogados
40.947CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.430VulnCheck XDB 11.064Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.678 exploits
Exploit-DB✓ VexDay Proof
EasyImageCatalogue 1.31 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-7133—webappsphp12 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in onlinetools.org EasyImageCatalogue 1.3.1 allow remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Lighttpd 1.4.x - mod_userdir Information Disclosure
CVE-2008-1270—remotelinux12 mar 2008
mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow rem
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Uberghey CMS 0.3.1 - 'index.php' Multiple Local File Inclusions
CVE-2008-1325—webappsphp12 mar 2008
Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and ex
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco User-Changeable Password (UCP) 3.3.4.12.5 - 'CSUserCGI.exe' Help Facility Cross-Site Scripting
CVE-2008-0533—remotewindows12 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) bef
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco User-Changeable Password (UCP) 3.3.4.12.5 - 'CSuserCGI.exe' Multiple Remote Vulnerabilities
CVE-2008-0532—doswindows12 mar 2008
Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Ac
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
EasyImageCatalogue 1.31 - 'describe.php?d' Cross-Site Scripting
CVE-2008-7133—webappsphp12 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in onlinetools.org EasyImageCatalogue 1.3.1 allow remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Travelsized CMS 0.4.1 - 'index.php' Multiple Local File Inclusions
CVE-2008-1324—webappsphp12 mar 2008
Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Chris LaPointe Download Center 1.2 - 'search' Cross-Site Scripting
CVE-2008-7134—webappsphp12 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Chris LaPointe Download Center 1.2 - 'category' Cross-Site Scripting
CVE-2008-7134—webappsphp12 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Jeebles Directory 2.9.60 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-1355—webappsphp12 mar 2008
Cross-site scripting (XSS) vulnerability in index.php in Jeebles Technology Jeebles Directory 2.9.60 allows remote attac
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
McAfee Framework ePolicy 3.x - Orchestrator '_naimcomn_Log' Remote Format String
CVE-2008-1357—doswindows12 mar 2008
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (P
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-7134—webappsphp12 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
EasyImageCatalogue 1.31 - 'addcomment.php?d' Cross-Site Scripting
CVE-2008-7133—webappsphp12 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in onlinetools.org EasyImageCatalogue 1.3.1 allow remote attackers t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eWeather - 'chart' Cross-Site Scripting
CVE-2008-1348—webappsphp12 mar 2008
Cross-site scripting (XSS) vulnerability in index.php in the eWebsite eWeather (Weather) module for PHP-Nuke allows remo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke zClassifieds Module - 'cat' SQL Injection
CVE-2008-1315—webappsphp11 mar 2008
SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke NukeC30 3.0 Module - 'id_catg' SQL Injection
CVE-2008-1308—webappsphp11 mar 2008
SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Nuke Hadith Module - 'cat' SQL Injection
CVE-2008-1298—webappsphp10 mar 2008
SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gallarific - Multiple Script Direct Request Authentication Bypass
CVE-2008-1327—webappsphp10 mar 2008
Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
RemotelyAnywhere 8.0.668 - 'Accept-Charset' Null Pointer Denial of Service
CVE-2008-1278—dosmultiple10 mar 2008
The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attac
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Drake CMS 0.4.11 RC8 - 'd_root' Local File Inclusion
CVE-2008-1371—webappsphp10 mar 2008
Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and e
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
EncapsGallery 1.11.2 - 'watermark.php?File' Cross-Site Scripting
CVE-2008-1296—webappsphp10 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Gallarific - 'search.php?query' Cross-Site Scripting
CVE-2008-1326—webappsphp10 mar 2008
Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
EncapsGallery 1.11.2 - 'catalog_watermark.php?file' Cross-Site Scripting
CVE-2008-1296—webappsphp10 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗
Metasploit300
RealPlayer rmoc3260.dll ActiveX Control Heap Corruption
CVE-2008-1309—08 mar 2008
The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, Rea
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Panda Internet Security/AntiVirus+Firewall 2008 - 'CPoint.sys' Memory Corruption
CVE-2008-1471—doswindows08 mar 2008
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath' Cross-Site Scripting
CVE-2008-1300—webappsphp08 mar 2008
Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/log
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath.0' Arbitrary File Access
CVE-2008-1301—webappsphp08 mar 2008
Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ImageVue 1.7 - 'popup.php?path' Cross-Site Scripting
CVE-2008-1273—webappsphp07 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion
CVE-2008-7152—webappsphp07 mar 2008
Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Office 2000/2003/2004/XP - File Memory Corruption
CVE-2008-0118—doswindows07 mar 2008
Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 f
35RISCO
abrir ↗
← anteriorpágina 1574 / 2.956próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.