Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.871exploits catalogados

40.961CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentes populares risco

88.871 exploits

Metasploit200

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

CVE-2006-6184—27 nov 2006

Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at

50RISCO

abrir ↗

Metasploit500

3CTftpSvc TFTP Long Mode Buffer Overflow

CVE-2006-6183—27 nov 2006

Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

3Com TFTP Service (3CTftpSvc) 2.0.1 - 'Long Transporting Mode' Overflow (PoC)

CVE-2006-6183—doswindows27 nov 2006

Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Clickblog - 'Displaycalendar.asp' SQL Injection

CVE-2006-6189—webappsasp27 nov 2006

SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ClickContact - 'default.asp' Multiple SQL Injections

CVE-2006-6181—webappsasp27 nov 2006

Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Evolve Shopping Cart - 'products.asp' SQL Injection

CVE-2006-6207—webappsasp27 nov 2006

SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to exe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.4.x - AppleTalk AIOCRegLocalZN IOCTL Stack Buffer Overflow

CVE-2006-6130—localosx27 nov 2006

Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) by calling the AIOCREGLOCALZN io

23RISCO

abrir ↗

Metasploit500

ProFTPD 1.2 - 1.3.0 sreplace Buffer Overflow (Linux)

CVE-2006-5815—26 nov 2006

Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably auth

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.4.x - Mach-O Binary Loading Integer Overflow

CVE-2006-6129—localosx26 nov 2006

Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a denial of service and possibly

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sisfo Kampus 0.8 - Remote File Inclusion / Download

CVE-2006-6140—webappsphp25 nov 2006

PHP remote file inclusion vulnerability in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel WebHost Manager 3.1 - 'park?ndomain' Cross-Site Scripting

CVE-2006-6198—webappsphp25 nov 2006

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel WebHost Manager 3.1 - 'dofeaturemanager?feature' Cross-Site Scripting

CVE-2006-6198—webappsphp25 nov 2006

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel WebHost Manager 3.1 - 'domts2?domain' Cross-Site Scripting

CVE-2006-6198—webappsphp25 nov 2006

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel WebHost Manager 3.1 - 'editpkg?pkg' Cross-Site Scripting

CVE-2006-6198—webappsphp25 nov 2006

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel WebHost Manager 3.1 - 'dochangeemail?email' Cross-Site Scripting

CVE-2006-6198—webappsphp25 nov 2006

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

fipsShop - Multiple SQL Injections

CVE-2006-6243—webappsasp25 nov 2006

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel WebHost Manager 3.1 - 'editzone?domain' Cross-Site Scripting

CVE-2006-6198—webappsphp25 nov 2006

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel WebHost Manager 3.1 - 'addon_configsupport.cgi?supporturl' Cross-Site Scripting

CVE-2006-6198—webappsphp25 nov 2006

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MMGallery 1.55 - 'Thumbs.php' Cross-Site Scripting

CVE-2006-6118—webappsphp24 nov 2006

Cross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Fixit iDms Pro Image Gallery - 'filelist.asp' Multiple SQL Injections

CVE-2006-6195—webappsasp24 nov 2006

Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Fixit iDms Pro Image Gallery - 'showfile.asp?fid' SQL Injection

CVE-2006-6195—webappsasp24 nov 2006

Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cahier de texte 2.0 - Database Backup / Source Disclosure

CVE-2006-6254—webappsphp24 nov 2006

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) o

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Simple PHP Gallery 1.1 - 'System SP_Index.php' Cross-Site Scripting

CVE-2006-6272—webappsphp24 nov 2006

Cross-site scripting (XSS) vulnerability in sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ASP ListPics 5.0 - 'Listpics.asp' SQL Injection

CVE-2006-6210—webappsasp24 nov 2006

SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MidiCart ASP - 'Item_Show.asp?ID2006quant' SQL Injection

CVE-2006-6209—webappsasp24 nov 2006

Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Business Objects Crystal Reports XI Professional - File Handling Buffer Overflow

CVE-2006-6133—remotewindows23 nov 2006

Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 20

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Site News - 'centre.php' Remote File Inclusion

CVE-2006-6212—webappsphp23 nov 2006

PHP remote file inclusion vulnerability in centre.php in Site News (site_news) 2.00, and possibly earlier, allows remote

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection

CVE-2006-6289—webappsphp23 nov 2006

Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric paramete

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Messagerie Locale - 'centre.php' Remote File Inclusion

CVE-2006-6151—webappsphp23 nov 2006

PHP remote file inclusion vulnerability in centre.php in Messagerie Locale as of 20061127 allows remote attackers to exe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Nvidia NView 3.5 - 'Keystone.exe' Local Denial of Service

CVE-2006-6340—doswindows23 nov 2006

keystone.exe in nVIDIA nView allows attackers to cause a denial of service via a long command line argument. NOTE: it i

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.