Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Metasploit200
Novell NetMail NMAP STOR Buffer Overflow
CVE-2006-6424—23 dez 2006
Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by ap
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Enthrallweb eHomes 1.0 - Multiple (SQL Injection / Cross-Site Scripting) Vulnerabilities
CVE-2006-6204—webappsasp23 dez 2006
Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Future Internet - 'index.cfm' Multiple SQL Injections
CVE-2006-6776—webappscfm23 dez 2006
Multiple SQL injection vulnerabilities in Future Internet allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Metasploit200
Novell NetMail IMAP APPEND Buffer Overflow
CVE-2006-6425—23 dez 2006
Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated u
50RISCO
abrir ↗
Metasploit200
Novell NetMail IMAP SUBSCRIBE Buffer Overflow
CVE-2006-6761—23 dez 2006
Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated u
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Future Internet - 'index.cfm?categoryId' Cross-Site Scripting
CVE-2006-6777—webappscfm23 dez 2006
Cross-site scripting (XSS) vulnerability in index.cfm in Future Internet allows remote attackers to inject arbitrary web
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Efkan Forum 1.0 - 'Grup' SQL Injection
CVE-2006-6794—webappsasp22 dez 2006
SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Xt-News 0.1 - 'show_news.php?id_news' Cross-Site Scripting
CVE-2006-6746—webappsphp22 dez 2006
Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
FTPRush 1.0.610 - Host Field Local Buffer Overflow
CVE-2006-6752—dosmultiple22 dez 2006
Buffer overflow in FTPRush 1.0.0.610 might allow attackers to gain privileges via a long Host field. NOTE: The provenan
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Portal 9i/10g - Container_Tabs.jsp Cross-Site Scripting
CVE-2006-6703—webappsphp22 dez 2006
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitra
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
KISGB 5.1.1 - 'Authenticate.php' Remote File Inclusion
CVE-2008-1635—webappsphp22 dez 2006
Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows remo
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
KISGB 5.1.1 - 'Authenticate.php' Remote File Inclusion
CVE-2006-6763—webappsphp22 dez 2006
Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book (KISGB) allow remote attackers to ex
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Xt-News 0.1 - 'add_comment.php?id_news' Cross-Site Scripting
CVE-2006-6746—webappsphp22 dez 2006
Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
A-Blog 1.0 - Cross-Site Scripting
CVE-2006-6729—webappsphp22 dez 2006
Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web scri
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server 5.2.1 - 'USER' Format String Denial of Service
CVE-2006-6751—doswindows22 dez 2006
Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service (a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Xt-News 0.1 - 'show_news.php?id_news' SQL Injection
CVE-2006-6747—webappsphp22 dez 2006
SQL injection vulnerability in show_news.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MKPortal M1.1.1 - 'Urlobox' Cross-Site Request Forgery
CVE-2006-6741—webappsphp21 dez 2006
Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messa
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Portal 9.0.2 - Calendar.jsp Multiple HTTP Response Splitting Vulnerabilities
CVE-2006-6697—webappsjsp20 dez 2006
CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Advanced Transfer Manager 1.30 - Source Code Disclosure
CVE-2006-1209—webappsphp20 dez 2006
PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web r
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - 'MessageBox' Memory Corruption Local Denial of Service
CVE-2006-6696—doswindows20 dez 2006
Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by callin
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mono XSP 1.x/2.0 - Source Code Information Disclosure
CVE-2006-6104—remotelinux20 dez 2006
The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, whi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Typo3 3.7/3.8/4.0 - 'Class.TX_RTEHTMLArea_PI1.php' Multiple Remote Command Execution Vulnerabilities
CVE-2006-6690—webappsphp20 dez 2006
rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Burak Yilmaz Download Portal - 'down.asp' SQL Injection
CVE-2006-6671—webappsasp19 dez 2006
SQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle 9i/10g - 'utl_file' FileSystem Access
CVE-2006-7141—remotelinux19 dez 2006
Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
osTicket 1.2/1.3 Support Cards - 'view.php' Cross-Site Scripting
CVE-2006-6733—webappsphp19 dez 2006
Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to in
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
KDE LibkHTML 4.2 - NodeType Function Denial of Service
CVE-2006-6660—doslinux19 dez 2006
The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Mini Web Shop 2.1.c - 'view.php?Viewcategory.php' Cross-Site Scripting
CVE-2006-6734—webappsphp19 dez 2006
Cross-site scripting (XSS) vulnerability in modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1
23RISCO
abrir ↗
Metasploit500
AstonSoft DeepBurner (DBR File) Path Buffer Overflow
CVE-2006-6665—19 dez 2006
Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
KDE libkhtml 3.5 < 4.2.0 - Unhandled HTML Parse Exception
CVE-2006-6660—doslinux19 dez 2006
The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption
CVE-2006-6651—dosmultiple19 dez 2006
Race condition in W29N51.SYS in the Intel 2200BG wireless driver 9.0.3.9 allows remote attackers to cause memory corrupt
23RISCO
abrir ↗
← anteriorpágina 1647 / 2.963próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.