Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.871exploits catalogados

40.961CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentes populares risco

88.871 exploits

Exploit-DB✓ VexDay Proof

Texas Rankem - 'tournament_id' SQL Injection

CVE-2006-6050—webappsasp18 nov 2006

Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPWebThings 1.5.2 - 'editor.php' Remote File Inclusion

CVE-2007-3141—webappsphp18 nov 2006

PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Active News Manager - 'catID' SQL Injection

CVE-2006-6094—webappsasp18 nov 2006

Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Alan Ward A-CART 2.0 - 'category.asp?catcode' SQL Injection (1)

CVE-2004-1873—webappsasp18 nov 2006

SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Blog:CMS 4.1.3 - 'list.php' Cross-Site Scripting

CVE-2006-6035—webappsphp18 nov 2006

Cross-site scripting (XSS) vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

A-Cart Pro 2.0 - 'product.asp?ProductID' SQL Injection

CVE-2006-6111—webappsasp18 nov 2006

Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ActiveNews Manager - 'articleId' SQL Injection (1)

CVE-2006-6095—webappsasp18 nov 2006

Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ActiveNews Manager - 'page' SQL Injection

CVE-2006-6095—webappsasp18 nov 2006

Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ActiveNews Manager - 'query' Cross-Site Scripting

CVE-2006-6096—webappsasp18 nov 2006

Cross-site scripting (XSS) vulnerability in activenews_search.asp in ActiveNews Manager allows remote attackers to injec

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Links_ ELinks 'smbclient' - Remote Command Execution

CVE-2006-5925—remotelinux18 nov 2006

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - 'NetpManageIPCConnect' Remote Stack Overflow (MS06-070)

CVE-2006-4691—remotewindows18 nov 2006

Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Wi

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Texas Rankem - 'selPlayer' SQL Injection

CVE-2006-6050—webappsasp18 nov 2006

Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Oxygen 1.1.3 (O2PHP Bulletin Board) - SQL Injection

CVE-2006-6280—webappsphp18 nov 2006

SQL injection vulnerability in viewthread.php in Oxygen (O2PHP Bulletin Board) 1.1.3 and earlier allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BestWebApp Dating Site Login Component - Multiple Field SQL Injections

CVE-2006-6021—webappsasp17 nov 2006

SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

vBulletin 3.6.x - Admin Control Panel Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-6040—webappsphp17 nov 2006

Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BestWebApp Dating Site - 'login_form.asp?msg' Cross-Site Scripting

CVE-2006-6022—webappsasp17 nov 2006

Cross-site scripting (XSS) vulnerability in login_form.asp in BestWebApp Dating Site allows remote attackers to inject a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

cPanel 10 - DNSlook.HTML Cross-Site Scripting

CVE-2004-1875—webappsphp17 nov 2006

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

20/20 Auto Gallery 3.2 - Multiple SQL Injections

CVE-2006-6092—webappsasp17 nov 2006

Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - Wkssvc NetrJoinDomain2 Stack Overflow (MS06-070)

CVE-2006-4691—remotewindows17 nov 2006

Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Wi

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Upload Tool 1.0 - Arbitrary File Upload / Directory Traversal

CVE-2006-7133—webappsphp17 nov 2006

Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

20/20 Applications Data Shed 1.0 - 'f-email.asp?itemID' SQL Injection

CVE-2006-6067—webappsasp17 nov 2006

Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to exec

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Adobe Reader 7.0.x - Multiple Vulnerabilities

CVE-2006-6027—doswindows17 nov 2006

Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

20/20 Applications Data Shed 1.0 - 'listings.asp' Multiple SQL Injections

CVE-2006-6067—webappsasp17 nov 2006

Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to exec

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Dicshunary 0.1a - 'check_status.php' Remote File Inclusion

CVE-2006-6281—webappsphp17 nov 2006

PHP remote file inclusion vulnerability in check_status.php in dicshunary 0.1 alpha allows remote attackers to execute a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Image Gallery with Access Database - 'dispimage.asp?id' SQL Injection

CVE-2006-6932—webappsasp16 nov 2006

Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?catname' Cross-Site Scripting

CVE-2006-6936—webappsasp16 nov 2006

Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?sortorder' SQL Injection

CVE-2006-6937—webappsasp16 nov 2006

SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQ

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

HTTP Upload Tool - 'download.php' Information Disclosure

CVE-2006-7134—webappsphp16 nov 2006

Unrestricted file upload vulnerability in main_user.php in Upload Tool for PHP 1.0 allows remote attackers to upload and

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Odysseus Blog 1.0 - 'blog.php' Cross-Site Scripting

CVE-2006-6951—webappsphp16 nov 2006

Cross-site scripting (XSS) vulnerability in blog.php in OdysseusBlog allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Image Gallery with Access Database - 'default.asp' Multiple SQL Injections

CVE-2006-6932—webappsasp16 nov 2006

Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.