Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.013exploits catalogados

41.057CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.648Exploit-DB 24.490GitHub PoC 18.462VulnCheck XDB 11.272Nuclei 4.601Metasploit 3.540✓ só verificadosrecentes populares risco

89.013 exploits

Exploit-DB✓ VexDay Proof

DCP-Portal 6.0 - 'login.php?Username' SQL Injection

CVE-2006-4836—webappsphp14 set 2006

SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Metasploit200

Ipswitch WS_FTP Server 5.05 XMD5 Overflow

CVE-2006-4847—14 set 2006

Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arb

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DCP-Portal 6.0 - '/admin/inc/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-4838—webappsphp14 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Blojsom 2.31 - Cross-Site Scripting

CVE-2006-4829—webappsphp14 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpQuiz 0.1 - 'pagename' Remote File Inclusion

CVE-2006-4834—webappsphp14 set 2006

PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mailman 2.1.x - Multiple Input Validation Vulnerabilities

CVE-2006-3636—webappscgi14 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Shadowed Portal 5.599 - 'root' Remote File Inclusion

CVE-2006-4885—webappsphp13 set 2006

PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'admin.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Event Calendar 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-4825—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in cl_files/index.php in SoftComplex PHP Event Calendar 1.5.1, and p

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

X11R6 < 6.4 XKEYBOARD (Solaris/SPARC) - Local Buffer Overflow (2)

CVE-2006-4655—localsolaris13 set 2006

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NX5Linkx 1.0 - Multiple SQL Injections

CVE-2006-4504—webappsphp13 set 2006

SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) c and (

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'contact.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ForumJBC 4.0 - 'Haut.php' Cross-Site Scripting

CVE-2006-4771—webappsphp13 set 2006

Cross-site scripting (XSS) vulnerability in haut.php in ForumJBC 4 allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - COM Object Remote Heap Overflow

CVE-2006-4777—remotewindows13 set 2006

Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) fo

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'user.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Verso NetPerformer Frame Relay Access Device - Telnet Buffer Overflow

CVE-2006-4832—dosmultiple13 set 2006

Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'submitnews.php?PATH_INFO' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'search.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'download.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows Server 2003 - NetpIsRemote() Remote Overflow (MS06-040) (Metasploit)

CVE-2006-3439—remotewindows13 set 2006

Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote a

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'fpw.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Snitz Forums 2000 - 'forum.asp' Cross-Site Scripting

CVE-2006-4796—webappsasp13 set 2006

Cross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'news.php?PATH_INFO' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'signup.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NX5Linkx 1.0 - 'links.php' HTTP Response Splitting

CVE-2006-4505—webappsphp13 set 2006

CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Newsscript 0.5 - Local/Remote File Inclusion

CVE-2006-4766—webappsphp13 set 2006

Directory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IDevSpot iSupport 1.8 - 'index.php?cons_page_title' Cross-Site Scripting

CVE-2006-4884—webappsphp12 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp1.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/admin/log.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Telekorn Signkorn Guestbook 1.x - '/includes/functions.gb.php?dir_path' Remote File Inclusion

CVE-2006-4889—webappsphp12 set 2006

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_gl

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.