Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.013exploits catalogados

41.057CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.648Exploit-DB 24.490GitHub PoC 18.462VulnCheck XDB 11.272Nuclei 4.601Metasploit 3.540✓ só verificadosrecentes populares risco

89.013 exploits

Exploit-DB✓ VexDay Proof

Bloq 0.5.4 - '/files/mainfile.php?page[path]' Remote File Inclusion

CVE-2006-6592—webappsphp13 out 2006

Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

maluinfo 206.2.38 - 'bb_usage_stats.php' Remote File Inclusion

CVE-2006-7148—webappsphp13 out 2006

PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows r

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bloq 0.5.4 - 'rss.php?page[path]' Remote File Inclusion

CVE-2006-6592—webappsphp13 out 2006

Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MamboLaiThai ExtCalThai 0.9.1 - 'mail.inc.php?CONFIG_EXT[LIB_DIR]' Remote File Inclusion

CVE-2006-6634—webappsphp12 out 2006

Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and earlier component for M

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FreeBSD 5.4/6.0 - 'ptrace PT_LWPINFO' Local Denial of Service

CVE-2006-4516—dosbsd12 out 2006

Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and k

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FreeWPS 2.11 - 'upload.php' Remote Command Execution

CVE-2006-5411—webappsphp12 out 2006

Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Download-Engine 1.4.2 - 'spaw' Remote File Inclusion

CVE-2006-4656—webappsphp12 out 2006

PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP TopSites FREE 1.022b - 'config.php' Remote File Inclusion

CVE-2006-7091—webappsphp12 out 2006

PHP remote file inclusion vulnerability in config.php in phpht Topsites FREE 1.022b allows remote attackers to execute a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MamboLaiThai ExtCalThai 0.9.1 - 'admin_events.php?CONFIG_EXT[LANGUAGES_DIR]' Remote File Inclusion

CVE-2006-6634—webappsphp12 out 2006

Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and earlier component for M

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpList 2.x - Public Pages MultipleCross-Site Scripting Vulnerabilities

CVE-2006-5294—webappsphp12 out 2006

Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CommunityPortals 1.0 - 'bug.php' Remote File Inclusion

CVE-2006-7146—webappsphp11 out 2006

PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier all

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CommunityPortals 1.0 - 'import-archive.php' File Inclusion

CVE-2006-5739—webappsphp11 out 2006

PHP remote file inclusion vulnerability in cpadmin/cpa_index.php in Leicestershire communityPortals 1.0_2005-10-18_12-31

23RISCO

abrir ↗

Metasploit600

Solaris libnspr NSPR_LOG_FILE Privilege Escalation

CVE-2006-4842—11 out 2006

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment v

38RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Tagit2b - 'DelTagUser.php' Remote File Inclusion

CVE-2006-5249—webappsphp10 out 2006

PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remot

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Hastymail 1.x - IMAP SMTP Command Injection

CVE-2006-5262—webappsphp10 out 2006

CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated

23RISCO

abrir ↗

Metasploit300

MS06-071 Microsoft Internet Explorer XML Core Services HTTP Request Handling

CVE-2006-5745—10 out 2006

Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BlueShoes Framework 4.6 - 'GoogleSearch.php' Remote File Inclusion

CVE-2006-5250—webappsphp10 out 2006

PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6_public and earlier allows

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenDock Easy Doc 1.4 - 'doc_directory' File Inclusion

CVE-2006-5244—webappsphp09 out 2006

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register_globals is enabl

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ISearch 2.16 - 'ISEARCH_PATH' Remote File Inclusion

CVE-2006-5232—webappsphp09 out 2006

Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EXPBlog 0.3.5 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-5239—webappsphp09 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in eXpBlog 0.3.5 and earlier allow remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Zabbix 1.1.2 - Multiple Remote Code Execution Vulnerabilities

CVE-2006-6692—doslinux09 out 2006

Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service (applicati

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Deep CMS 2.0 - 'index.php' Remote File Inclusion

CVE-2006-5251—webappsphp09 out 2006

PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenDock Easy Doc 1.4 - 'doc_directory' File Inclusion

CVE-2006-5243—webappsphp09 out 2006

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when register_globals is enable

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpWebSite 0.10.2 - 'PHPWS_SOURCE_DIR' Multiple Remote File Inclusions

CVE-2006-5234—webappsphp09 out 2006

Multiple PHP remote file inclusion vulnerabilities in phpWebSite 0.10.2 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Moodle Blog 1.18.2.2/1.6.2 Module - SQL Injection

CVE-2006-5219—webappsphp08 out 2006

SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPPC 1.03 RC1 - '/lib/functions.inc.php' Remote File Inclusion

CVE-2006-7135—webappsphp08 out 2006

PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator (phpPC) 1.04 allows remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Emek Portal 2.1 - 'Uyegiris.asp' SQL Injection

CVE-2006-5217—webappsasp06 out 2006

SQL injection vulnerability in giris_yap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AckerTodo 4.2 - 'login.php' Multiple SQL Injections

CVE-2006-5228—webappsphp06 out 2006

Multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) in Rob Hensley ackerTodo 4.2 an

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

eXtremail 1.x/2.1 - Remote Format String (3)

CVE-2001-1078—remotelinux06 out 2006

Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privile

23RISCO

abrir ↗

Metasploit200

SHTTPD URI-Encoded POST Request Overflow

CVE-2006-5216—06 out 2006

Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary cod

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.