Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.013exploits catalogados

41.057CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.648Exploit-DB 24.490GitHub PoC 18.462VulnCheck XDB 11.272Nuclei 4.601Metasploit 3.540✓ só verificadosrecentes populares risco

89.013 exploits

Exploit-DB✓ VexDay Proof

MKPortal 1.0/1.1 - 'PMPopup.php' Cross-Site Scripting

CVE-2006-2066—webappsphp27 set 2006

Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Skype Technologies Skype 1.5 - NSRunAlertPanel Remote Format String

CVE-2006-5084—remoteosx26 set 2006

Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote att

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CubeCart 3.0.x - 'view_order.php?order_id' Cross-Site Scripting

CVE-2006-5108—webappsphp26 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CubeCart 3.0.x - '/admin/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-5108—webappsphp26 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CubeCart 3.0.x - '/admin/print_order.php?order_id' Cross-Site Scripting

CVE-2006-5108—webappsphp26 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CubeCart 3.0.x - '/admin/nav.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-5108—webappsphp26 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CubeCart 3.0.x - '/admin/print_order.php?order_id' SQL Injection

CVE-2006-5107—webappsphp26 set 2006

Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CubeCart 3.0.x - 'view_doc.php?view_doc' SQL Injection

CVE-2006-5107—webappsphp26 set 2006

Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

vBulletin 2.3.x - 'global.php' SQL Injection

CVE-2006-5104—webappsphp26 set 2006

SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CubeCart 3.0.x - 'footer.inc.php?la_pow_by' Cross-Site Scripting

CVE-2006-5108—webappsphp26 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CubeCart 3.0.x - '/admin/forgot_pass.php?user_name' SQL Injection

CVE-2006-5107—webappsphp26 set 2006

Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Phoenix Evolution CMS - '/modules/pageedit/index.php?pageid' Cross-Site Scripting

CVE-2006-5090—webappsphp26 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CubeCart 3.0.x - 'view_order.php?order_id' SQL Injection

CVE-2006-5107—webappsphp26 set 2006

Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CubeCart 3.0.x - '/admin/image.php?image' Cross-Site Scripting

CVE-2006-5108—webappsphp26 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Invoice 2.2 - 'home.php' Cross-Site Scripting

CVE-2006-5074—webappsphp26 set 2006

Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Phoenix Evolution CMS - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-5090—webappsphp26 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Photostore - 'details.php?gid' Cross-Site Scripting

CVE-2006-5057—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Back-End CMS 0.4.5 - '/admin/index.php?includes_path' Remote File Inclusion

CVE-2006-5076—webappsphp25 set 2006

Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Opial AV Download Management 1.0 - 'index.php' Cross-Site Scripting

CVE-2006-5056—webappsphp25 set 2006

Cross-site scripting (XSS) vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BirdBlog 1.x - 'index.php?page' Cross-Site Scripting

CVE-2006-5064—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BirdBlog 1.x - 'user.php?uid' Cross-Site Scripting

CVE-2006-5064—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DanPHPSupport 0.5 - 'index.php?page' Cross-Site Scripting

CVE-2006-5066—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Back-End CMS 0.4.5 - 'Facts.php?includes_path' Remote File Inclusion

CVE-2006-5076—webappsphp25 set 2006

Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BirdBlog 1.x - 'comment.php?entryid' Cross-Site Scripting

CVE-2006-5064—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Call of Duty Server 4.1.x - Callvote Map Command Remote Buffer Overflow

CVE-2006-5058—dosmultiple25 set 2006

Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Photostore - 'view_photog.php?photogid' Cross-Site Scripting

CVE-2006-5057—webappsphp25 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BBSNew 2.0.1 - 'index2.php' Remote File Inclusion

CVE-2006-5103—webappsphp25 set 2006

PHP remote file inclusion vulnerability in admin/index2.php in bbsNew 2.0.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - 'VML' Remote Buffer Overflow (SP2)

CVE-2006-3866—remotewindows25 set 2006

20RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Exporia 0.3 - 'Common.php' Remote File Inclusion

CVE-2006-5920—webappsphp25 set 2006

PHP remote file inclusion vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

My-BIC 0.6.5 - 'Mybic_Server.php' Remote File Inclusion

CVE-2006-5089—webappsphp25 set 2006

PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.