Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.013exploits catalogados

41.057CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.648Exploit-DB 24.490GitHub PoC 18.462VulnCheck XDB 11.272Nuclei 4.601Metasploit 3.540✓ só verificadosrecentes populares risco

89.013 exploits

Metasploit200

CA BrightStor ARCserve Message Engine Heap Overflow

CVE-2006-5143—05 out 2006

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve B

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (2)

CVE-2006-5143—remotewindows05 out 2006

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve B

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (1)

CVE-2006-5143—remotewindows05 out 2006

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve B

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP 3 < 5 - ZendEngine ECalloc Integer Overflow

CVE-2006-4812—remotephp05 out 2006

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argume

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Civica - 'Display.asp' SQL Injection

CVE-2006-7231—webappsasp05 out 2006

SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WikyBlog 1.2.x - 'index.php' Remote File Inclusion

CVE-2006-5193—webappsphp05 out 2006

PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/tax_classes.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/manufacturers.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/languages.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/countries.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/banner_manager.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/products_attributes.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/products_expected.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/banner_statistics.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JAF CMS 4.0 RC1 - Multiple Remote File Inclusions

CVE-2006-7127—webappsphp04 out 2006

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion

CVE-2006-5209—webappsphp04 out 2006

PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/tax_rates.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpBB Static Topics 1.0 - 'phpbb_root_path' File Inclusion

CVE-2006-5191—webappsphp04 out 2006

PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/newsletters.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/reviews.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPGreetz 0.99 - 'footer.php' Remote File Inclusion

CVE-2006-5192—webappsphp04 out 2006

PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/specials.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/stats_products_purchased.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/currencies.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/orders_status.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/stats_products_viewed.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

osCommerce 2.2 - '/admin/zones.php?page' Cross-Site Scripting

CVE-2006-5190—webappsphp04 out 2006

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JAF CMS 4.0 RC1 - Multiple Remote File Inclusions

CVE-2008-1609—webappsphp04 out 2006

Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

JAF CMS 4.0 RC1 - 'forum.php' Remote File Inclusion

CVE-2008-1609—webappsphp03 out 2006

Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Motorola SB4200 - Remote Denial of Service

CVE-2006-5196—doshardware03 out 2006

The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (de

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.