Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Enterprise Payroll Systems 1.1 - 'footer' Remote File Inclusion

CVE-2006-2982—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb ePhotos 1.0 - 'subLevel2.asp' SQL Injection

CVE-2006-3027—webappsasp

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Minerva 2.0.8a Build 237 - 'phpbb_root_path' File Inclusion

CVE-2006-3028—webappsphp

PHP remote file inclusion vulnerability in stat_modules/users_age/module.php in Minerva 2.0.8a Build 237 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

blur6ex 0.3.462 - 'ID' Admin Disclosure / Blind SQL Injection

CVE-2006-3065—webappsphp

SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmartSite CMS 1.0 - 'root' Remote File Inclusion

CVE-2006-3162—webappsphp

PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quintessential Player 4.50.1.82 - Playlist Denial of Service (PoC)

CVE-2006-6261—doswindows

Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service (cra

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyPHP CMS 0.3 - 'domain' Remote File Inclusion

CVE-2006-3478—webappsphp

PHP remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and earlier, when register_

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MiniBB 1.5a - Remote File Inclusion

CVE-2006-3690—webappsphp

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MoSpray 18RC1 - Remote File Inclusion

CVE-2006-3847—webappsphp

PHP remote file inclusion vulnerability in (1) admin.php, and possibly (2) details.php, (3) modify.php, (4) newgroup.php

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.4 - 'old_prefix' Blind SQL Injection

CVE-2006-3851—webappsphp

SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Etomite CMS 0.6.1 - 'Username' SQL Injection (mq = off)

CVE-2006-3904—webappsphp

SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Live! 3.2.1 - 'help.php' Remote File Inclusion

CVE-2006-3911—webappsphp

PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbi

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component mambatStaff 3.1b - Remote File Inclusion

CVE-2006-3947—webappsphp

PHP remote file inclusion vulnerability in components/com_mambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlie

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Mam-Moodle alpha - Remote File Inclusion

CVE-2006-3951—webappsphp

PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com_moodle) for Mambo allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

k_fileManager 1.2 - 'dwl_include_path' Remote File Inclusion

CVE-2006-3987—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Voodoo chat 1.0RC1b - 'file_path' Remote File Inclusion

CVE-2006-3991—webappsphp

PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

TSEP 0.942 - 'copyright.php' Remote File Inclusion

CVE-2006-3993—webappsphp

PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project (TSEP) 0.942 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

ATutor 1.5.3.1 - 'links' Blind SQL Injection

CVE-2006-3996—webappsphp

SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

SAPID Shop 1.2 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4062—webappsphp

PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SAPID Blog Beta 2 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4063—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

YenerTurk Haber Script 1.0 - SQL Injection

CVE-2006-4064—webappsasp

SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) - SQL Injection

CVE-2006-4072—webappsasp

Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACDSee 9.0 - '.xpm' Local Buffer Overflow

CVE-2007-2193—localwindows

Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build

50RISCO

abrir ↗

Referência✓ VexDay Proof

XnView 1.90.3 - '.xpm' Local Buffer Overflow

CVE-2007-2194—localwindows

Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a craft

28RISCO

abrir ↗

Referência✓ VexDay Proof

Spaminator 1.7 - 'page' Remote File Inclusion

CVE-2006-4158—webappsphp

PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpPrintAnalyzer 1.2 - Remote File Inclusion

CVE-2006-4164—webappsphp

PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Photoshop CS2/CS3 / Paint Shop Pro 11.20 - '.png' Local Buffer Overflow

CVE-2007-2366—localwindows

Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a craf

35RISCO

abrir ↗

Referência✓ VexDay Proof

WTcom 0.2.4-alpha - 'torrents.php' SQL Injection

CVE-2006-4238—webappsphp

SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component mambelfish 1.1 - Remote File Inclusion

CVE-2006-4270—webappsphp

PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com_mambelfish) 1.1 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tutti Nova 1.6 - 'TNLIB_DIR' Remote File Inclusion

CVE-2006-4276—webappsphp

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.