Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Multiple Membership Script 2.5 - 'id' SQL Injection

CVE-2008-6362—webappsphp

SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 - 'include()' Remote File Upload

CVE-2004-2262—webappsphp

ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Brim 1.2.1 - 'renderer' Multiple Remote File Inclusions

CVE-2006-5429—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPPowerCards 2.10 - 'txt.inc.php' Remote Code Execution

CVE-2006-5432—webappsphp

Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register_globals is

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2)

CVE-2006-0476—remotewindows

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with

60RISCO

abrir ↗

Referência✓ VexDay Proof

flinx 1.3 - 'id' SQL Injection

CVE-2008-0468—webappsphp

SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Move Networks Upgrade Manager Control - Remote Buffer Overflow

CVE-2008-0477—remotewindows

Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgra

28RISCO

abrir ↗

Referência✓ VexDay Proof

Web Wiz Forums 9.07 - 'sub' Directory Traversal

CVE-2008-0480—webappsasp

Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Top Auction 1.0 - 'viewcat.php' SQL Injection

CVE-2005-3952—webappsphp

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.03 - 'misc.php' SQL Injection

CVE-2006-0959—webappsphp

SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_newsletter' 4.5 - 'listid' SQL Injection

CVE-2008-0510—webappsphp

SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_mamml' - 'listid' SQL Injection

CVE-2008-0511—webappsphp

SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cisco IP Phone 7940 - Reboot (Denial of Service)

CVE-2006-0179—doshardware

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN pack

28RISCO

abrir ↗

Referência✓ VexDay Proof

Photo Cart 3.9 - 'adminprint.php' Remote File Inclusion

CVE-2006-6093—webappsphp

Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

BXCP 0.2.9.9 - 'tid' SQL Injection

CVE-2006-0821—webappsphp

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wikepage Opus 10 < 2006.2a (lng) - Remote Command Execution

CVE-2006-4418—webappsphp

Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

JiRos FAQ Manager 1.0 - 'index.asp' SQL Injection

CVE-2006-6149—webappsphp

SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Invision Power Board 2.1.4 - Register Users Denial of Service

CVE-2006-0888—dosmultiple

index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unsp

23RISCO

abrir ↗

Referência✓ VexDay Proof

4Images 1.7.1 - Local File Inclusion / Remote Code Execution

CVE-2006-0899—webappsphp

Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include

23RISCO

abrir ↗

Referência✓ VexDay Proof

GeekLog 1.4.0sr3 - '_CONF[path]' Remote File Inclusion

CVE-2006-6225—webappsphp

Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board Lite 1.0.2 - 'decode_cookie()' SQL Injection

CVE-2006-6237—webappsphp

SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Classified Ad System 1.0 - 'main' SQL Injection

CVE-2006-6349—webappsasp

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)

CVE-2008-0590—doswindows

Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of servic

28RISCO

abrir ↗

Referência✓ VexDay Proof

Linux Kernel 2.6.17 < 2.6.24.1 - 'vmsplice' Local Privilege Escalation (2)

CVE-2008-0600—locallinux

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer befo

23RISCO

abrir ↗

Referência✓ VexDay Proof

D2-Shoutbox 4.2 IPB Mod - 'load' SQL Injection

CVE-2006-1153—webappsphp

SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load pa

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP iCalendar 2.21 - 'publish.ical.php' Remote Code Execution

CVE-2006-1291—webappsphp

publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require authentication for write acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

File Store PRO 3.2 - Multiple Blind SQL Injections

CVE-2006-1278—webappsphp

SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBookingCalendar 1.0c - 'details_view.php' SQL Injection

CVE-2006-1422—webappsphp

SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Update 2.7 - '/admin/uploads.php' Remote Code Execution

CVE-2006-6879—webappsphp

Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated us

23RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.45 - Multiple Vulnerabilities

CVE-2006-1348—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attacker

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.