Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Mambo Component Mam-Moodle alpha - Remote File Inclusion

CVE-2006-3951—webappsphp

PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com_moodle) for Mambo allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

k_fileManager 1.2 - 'dwl_include_path' Remote File Inclusion

CVE-2006-3987—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Voodoo chat 1.0RC1b - 'file_path' Remote File Inclusion

CVE-2006-3991—webappsphp

PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

TSEP 0.942 - 'copyright.php' Remote File Inclusion

CVE-2006-3993—webappsphp

PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project (TSEP) 0.942 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

ATutor 1.5.3.1 - 'links' Blind SQL Injection

CVE-2006-3996—webappsphp

SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

SAPID Shop 1.2 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4062—webappsphp

PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SAPID Blog Beta 2 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4063—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

YenerTurk Haber Script 1.0 - SQL Injection

CVE-2006-4064—webappsasp

SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) - SQL Injection

CVE-2006-4072—webappsasp

Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACDSee 9.0 - '.xpm' Local Buffer Overflow

CVE-2007-2193—localwindows

Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build

50RISCO

abrir ↗

Referência✓ VexDay Proof

XnView 1.90.3 - '.xpm' Local Buffer Overflow

CVE-2007-2194—localwindows

Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a craft

28RISCO

abrir ↗

Referência✓ VexDay Proof

phNNTP 1.3 - 'article-raw.php' Remote File Inclusion

CVE-2006-4103—webappsphp

PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

VWar 1.50 R14 - 'online.php' SQL Injection

CVE-2006-4142—webappsphp

SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wheatblog 1.1 - 'session.php' Remote File Inclusion

CVE-2006-4198—webappsphp

PHP remote file inclusion vulnerability in includes/session.php in Wheatblog (wB) 1.1 and earlier, when register_globals

23RISCO

abrir ↗

Referência✓ VexDay Proof

Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (1)

CVE-2006-4202—webappsasp

SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebSPELL 4.01.02 - 'picture.php' File Disclosure

CVE-2007-2368—webappsphp

picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

WTcom 0.2.4-alpha - 'torrents.php' SQL Injection

CVE-2006-4238—webappsphp

SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component mambelfish 1.1 - Remote File Inclusion

CVE-2006-4270—webappsphp

PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com_mambelfish) 1.1 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tutti Nova 1.6 - 'TNLIB_DIR' Remote File Inclusion

CVE-2006-4276—webappsphp

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module WF-Links 1.03 - 'cid' SQL Injection

CVE-2007-2373—webappsphp

SQL injection vulnerability in viewcat.php in the WF-Links (wflinks) 1.03 and earlier module for XOOPS allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Integramod Portal 2.x - 'functions_portal.php' Remote File Inclusion

CVE-2006-4369—webappsphp

Absolute path traversal vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier, when magic_

23RISCO

abrir ↗

Referência✓ VexDay Proof

pSlash 0.7 - 'lvc_include_dir' Remote File Inclusion

CVE-2006-4373—webappsphp

PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyIdentD 2.2 - Remote Buffer Overflow

CVE-2007-2711—remotewindows

Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long s

50RISCO

abrir ↗

Referência✓ VexDay Proof

Creative Files 1.2 - 'kommentare.php' SQL Injection

CVE-2007-1556—webappsphp

SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

ProManager 0.73 - 'note.php' SQL Injection

CVE-2006-4419—webappsphp

SQL injection vulnerability in note.php in ProManager 0.73 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Core - 'viewcat.php' SQL Injection

CVE-2007-1814—webappsphp

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Library - 'viewcat.php' SQL Injection

CVE-2007-1815—webappsphp

SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Interact 2.2 - 'CONFIG[base_path]' Remote File Inclusion

CVE-2006-4448—webappsphp

Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when register_globals is enabled, allow remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web3news 0.95 - 'PHPSECURITYADMIN_PATH' Remote File Inclusion

CVE-2006-4452—webappsphp

PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when regis

23RISCO

abrir ↗

Referência✓ VexDay Proof

InoutMailingListManager 3.1 - Remote Command Execution

CVE-2007-2004—webappsphp

Multiple SQL injection vulnerabilities in InoutMailingListManager 3.1 and earlier allow remote attackers to execute arbi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.