Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Sphider 1.3 - 'configset.php' Remote File Inclusion

CVE-2006-1784—webappsphp

PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disa

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service

CVE-2007-0120—doswindows

Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of ser

23RISCO

abrir ↗

Referência✓ VexDay Proof

SysInfo 1.21 - 'sysinfo.cgi' Remote Command Execution

CVE-2006-1832—webappscgi

sysinfo.cgi in sysinfo 1.21 allows remote attackers to obtain the installation path via the debugger action.

23RISCO

abrir ↗

Referência✓ VexDay Proof

EPNadmin 0.7 - 'constantes.inc.php' Remote File Inclusion

CVE-2006-5555—webappsphp

PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blackorpheus ClanMemberSkript 1.0 - SQL Injection

CVE-2006-1917—webappsphp

SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Internet PhotoShow 1.3 - 'page' Remote File Inclusion

CVE-2006-1919—webappsphp

PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

vp-asp shopping cart 6.09 - SQL Injection / Cross-Site Scripting

CVE-2007-0225—webappsasp

Cross-site scripting (XSS) vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

nabopoll 1.2 - Remote Unprotected Admin Section

CVE-2007-0873—webappsphp

nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a di

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'catid' SQL Injection

CVE-2006-2363—webappsphp

SQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion

CVE-2006-2361—webappsphp

PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as us

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fastpublish CMS 1.6.9 - config[fsBase] Remote File Inclusion

CVE-2006-2726—webappsphp

PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files vi

28RISCO

abrir ↗

Referência✓ VexDay Proof

aspWebLinks 2.0 - SQL Injection / Admin Pass Change

CVE-2006-2847—webappsasp

SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

CS-Cart 1.3.3 - 'classes_dir' Remote File Inclusion

CVE-2006-2863—webappsphp

PHP remote file inclusion vulnerability in class.cs_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple iOS 4.0.3 - DPAP Server Denial of Service

CVE-2008-0830—dosios

The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (c

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebspotBlogging 3.0.1 - 'path' Remote File Inclusion

CVE-2006-2860—webappsphp

PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code v

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Rapid Recipe 1.6.5 - SQL Injection

CVE-2008-0831—webappsphp

Multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 and earlier component for Joomla! all

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Bible Portal Project 2.12 - 'destination' File Inclusion

CVE-2006-3177—webappsphp

PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ad Manager Pro 2.6 - 'ipath' Remote File Inclusion

CVE-2006-3192—webappsphp

PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Stats Generator 2.1.1 - SQL Injection

CVE-2006-3184—webappsasp

Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

BandSite CMS 1.1.1 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-3193—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, al

28RISCO

abrir ↗

Referência✓ VexDay Proof

DataLife Engine 4.1 - SQL Injection

CVE-2006-3221—webappsphp

SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module mx_modsdb 1.0 - Remote File Inclusion

CVE-2006-6560—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Po

23RISCO

abrir ↗

Referência✓ VexDay Proof

Python 2.4.2 - 'realpath()' Local Stack Overflow

CVE-2006-1542—locallinux

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

THoRCMS 1.3.1 - 'phpbb_root_path' Remote File Inclusion

CVE-2006-3269—webappsphp

PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Randshop 1.1.1 - 'header.inc.php' Remote File Inclusion

CVE-2006-3375—webappsphp

PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow

CVE-2007-1709—localwindows

Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows contex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sabdrimer PRO 2.2.4 - 'pluginpath' Remote File Inclusion

CVE-2006-3520—webappsphp

PHP remote file inclusion vulnerability in skins/advanced/advanced1.php in Sabdrimer Pro 2.2.4, when register_globals is

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.1.0 - Remote File Inclusion

CVE-2006-3528—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Simpleboard Mambo module 1.1.0 and earlier allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection

CVE-2007-1712—webappsasp

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eskolar CMS 0.9.0.0 - Blind SQL Injection

CVE-2006-3727—webappsphp

Multiple SQL injection vulnerabilities in Eskolar CMS 0.9.0.0 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.