Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
88.871 exploits
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'ShortURL.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - '/implementation/Management/db_connect.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'SubscriptionDefaultTime.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Log.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'template.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'SystemPref.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'UrlType.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'SubscriptionSection.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'UserType.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'LocalizerConfig.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Alias.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'ArticleData.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Event.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'ArticleTopic.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'IPAccess.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'ArticleTypeField.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IncrediMail IMMenuShellExt - ActiveX Control Buffer Overflow
CVE-2007-1683—remotewindows08 mai 2007
Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.d
35RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'ArticleType.php?g_documentRoot' Remote File Inclusion
CVE-2006-5911—webappsphp08 mai 2007
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Trend Micro ServerProtect 5.58 - 'SpntSvc.exe' Remote Stack Buffer Overflow
CVE-2007-2508—remotewindows07 mai 2007
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SunShop Shopping Cart 4.0 - 'index.php?l' Cross-Site Scripting
CVE-2007-2547—webappsphp07 mai 2007
Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attacke
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OTRS 2.0.4 - index.pl Cross-Site Scripting
CVE-2007-2524—webappscgi07 mai 2007
Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP PEAR 1.5.3 - INSTALL-AS Attribute Arbitrary File Overwrite
CVE-2007-2519—remotelinux07 mai 2007
Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to ov
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Versalsoft HTTP File Uploader - ActiveX 6.36 AddFile Remote Denial of Service
CVE-2007-2563—doswindows07 mai 2007
Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remot
23RISCO
abrir ↗
Metasploit400
Trend Micro ServerProtect 5.58 EarthAgent.EXE Buffer Overflow
CVE-2007-2508—07 mai 2007
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote
60RISCO
abrir ↗
Metasploit400
Trend Micro ServerProtect 5.58 CreateBinding() Buffer Overflow
CVE-2007-2508—07 mai 2007
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote
60RISCO
abrir ↗
Metasploit300
Solaris srsexec Arbitrary File Reader
CVE-2007-2617—07 mai 2007
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file per
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FipsCMS 2.1 - 'pid' SQL Injection
CVE-2007-2561—webappsasp07 mai 2007
SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
SunShop Shopping Cart 4.0 - 'index.php' Multiple SQL Injections
CVE-2007-2549—webappsphp07 mai 2007
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ELinks Relative 0.10.6/011.1 - Path Arbitrary Code Execution
CVE-2007-2027—locallinux07 mai 2007
Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (2)
CVE-2007-2537—webappsphp04 mai 2007
Multiple SQL injection vulnerabilities in mainfile.php in NPDS 5.10 and earlier allow remote authenticated users to exec
23RISCO
abrir ↗
← anteriorpágina 1621 / 2.963próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.