Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

phpBB 3 - Mod Tag Board 4 Blind SQL Injection

CVE-2008-6314—webappsphp

SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Riddles Complete Website 1.2.1 - 'riddleid' SQL Injection

CVE-2008-5166—webappsphp

SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Post Card 1.02 - Authentication Bypass

CVE-2008-6623—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhpReactor 1.2.7pl1 - 'pathtohomedir' Remote File Inclusion

CVE-2006-3983—webappsphp

PHP remote file inclusion vulnerability in editprofile.php in php(Reactor) 1.27pl1 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

GuildFTPd 0.999.8.11/0.999.14 - Heap Corruption (PoC) / Denial of Service

CVE-2008-4572—doswindows

GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência✓ VexDay Proof

MunzurSoft Wep Portal W3 - 'kat' SQL Injection

CVE-2008-4573—webappsasp

SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hummingbird Deployment Wizard 2008 - ActiveX Command Execution

CVE-2008-4728—remotewindows

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in

35RISCO

abrir ↗

Referência✓ VexDay Proof

Hummingbird Deployment Wizard 2008 - ActiveX File Execution(2)

CVE-2008-4728—remotewindows

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in

35RISCO

abrir ↗

Referência✓ VexDay Proof

ZeusCart 2.0 - 'category_list.php' SQL Injection

CVE-2008-5216—webappsphp

SQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Merlix Teamworx Server - File Disclosure/Bypass

CVE-2008-5600—webappsphp

Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

GuppY 4.6.3 - 'index.php?selskin' Remote File Inclusion

CVE-2007-5845—webappsphp

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Message Board 2.2.1c - SQL Injection

CVE-2007-5887—webappsasp

SQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Tech Article 1.x - SQL Injection

CVE-2008-6050—webappsphp

SQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyRing 4.2.0 - 'view_com.php' SQL Injection

CVE-2006-4114—webappsphp

SQL injection vulnerability in view_com.php in Nicolas Grandjean PHPMyRing 4.2.0 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pixaria Gallery 1.x - 'class.Smarty.php' Remote File Inclusion

CVE-2007-2458—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arb

28RISCO

abrir ↗

Referência✓ VexDay Proof

Seditio CMS 121 - SQL Injection

CVE-2007-6202—webappsphp

SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Banner Manager - Insecure Cookie Handling

CVE-2008-6858—webappsphp

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by sett

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Control Panel XE 1.5 - Insecure Cookie Handling

CVE-2008-6859—webappsphp

Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative ac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Live Support 5.1 - Insecure Cookie Handling

CVE-2008-6864—webappsphp

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative a

23RISCO

abrir ↗

Referência✓ VexDay Proof

merlix educate servert - Authentication Bypass / File Disclosure

CVE-2008-6870—webappsasp

Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_jim 1.0.1 - Remote File Inclusion

CVE-2006-4242—webappsphp

PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)

CVE-2007-6276—dososx

The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apache Tomcat Connector jk2-2.0.2 mod_jk2 - Remote Overflow

CVE-2007-6258—remotelinux

Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers t

35RISCO

abrir ↗

Referência✓ VexDay Proof

Falt4 CMS rc4 10.9.2007 - Multiple Vulnerabilities

CVE-2007-6310—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.01.01 - Database Backup Download

CVE-2006-4782—webappsphp

src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authe

23RISCO

abrir ↗

Referência✓ VexDay Proof

gf-3xplorer 2.4 - Cross-Site Scripting / Local File Inclusion

CVE-2007-6475—webappsphp

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

aeDating 4.1 - dir[inc] Remote File Inclusion

CVE-2006-4870—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

FaScript FaPersianHack 1.0 - SQL Injection

CVE-2008-0326—webappsphp

SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

CGX 20050314 - 'pathCGX' Remote File Inclusion

CVE-2007-2611—webappsphp

Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Exponent CMS 0.96.3 - 'view' Remote Command Execution

CVE-2006-4963—webappsphp

Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitr

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.