Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.013exploits catalogados

41.057CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.648Exploit-DB 24.490GitHub PoC 18.462VulnCheck XDB 11.272Nuclei 4.601Metasploit 3.540✓ só verificadosrecentes populares risco

89.013 exploits

Exploit-DB✓ VexDay Proof

Open Bulletin Board 1.0.8 - 'ROOT_PATH' File Inclusion

CVE-2006-4722—webappsphp10 set 2006

PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP 3 < 5 - Ini_Restore() 'Safe_mode' / 'open_basedir' Restriction Bypass

CVE-2006-4625—localphp09 set 2006

PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, su

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TextAds - 'delete.php?id' Cross-Site Scripting

CVE-2006-4747—webappsphp09 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TextAds - 'error.php?error' Cross-Site Scripting

CVE-2006-4747—webappsphp09 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Vikingboard 0.1b - 'help.php' Cross-Site Scripting

CVE-2006-4708—webappsphp08 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Sage 1.3.6 - Input Validation

CVE-2006-6919—remotemultiple08 set 2006

Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

X11R6 < 6.4 XKEYBOARD (Solaris/SPARC) - Local Buffer Overflow (1)

CVE-2006-4655—localsolaris08 set 2006

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

X11R6 < 6.4 XKEYBOARD (solaris x86) - Local Buffer Overflow

CVE-2006-4655—localsolaris08 set 2006

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Vikingboard 0.1b - 'report.php' Cross-Site Scripting

CVE-2006-4708—webappsphp08 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Vikingboard 0.1 - 'topic.php' SQL Injection

CVE-2006-4709—webappsphp08 set 2006

SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

X11R6 < 6.4 XKEYBOARD (sco x86) - Local Buffer Overflow

CVE-2006-4655—localsco08 set 2006

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

News Evolution 3.0.3 - _NE[AbsPath] Remote File Inclusion

CVE-2006-4678—webappsphp07 set 2006

PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code vi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ACGV News 0.9.1 - 'header.php' Remote File Inclusion

CVE-2006-4637—webappsphp07 set 2006

Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Nuke Book Catalog Module 1.0 - 'upload.php' Arbitrary File Upload

CVE-2006-4666—webappsphp07 set 2006

Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attack

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SL_Site 1.0 - 'spaw_root' Remote File Inclusion

CVE-2006-5291—webappsphp07 set 2006

PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows re

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Fusion 6.0.x - 'news.php' SQL Injection

CVE-2006-4673—webappsphp07 set 2006

Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on th

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WM-News 0.5 - Multiple Remote File Inclusions

CVE-2006-4666—webappsphp07 set 2006

Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attack

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AckerTodo 4.0 - 'index.php' Cross-Site Scripting

CVE-2006-4668—webappsphp07 set 2006

Cross-site scripting (XSS) vulnerability in index.php in Rob Hensley AckerTodo 4.0 allows remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TWiki 4.0.x - 'Viewfile' Directory Traversal

CVE-2006-4294—webappsphp07 set 2006

Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary fil

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BinGo News 3.01 - 'bnrep' Remote File Inclusion

CVE-2006-4649—webappsphp06 set 2006

PHP remote file inclusion vulnerability in bp_news.php in BinGo News (BP News) 3.01 and earlier allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Uni-vert PHPLeague 0.82 - 'Joueurs.php' SQL Injection

CVE-2006-4643—webappsphp06 set 2006

SQL injection vulnerability in consult/joueurs.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DSocks 1.3 - 'Name' Buffer Overflow (PoC)

CVE-2006-4611—dosmultiple05 set 2006

Buffer overflow in the _tor_resolve function in dsocks.c in dsocks before 1.4 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBB 0.1 - 'Page' Cross-Site Scripting

CVE-2006-4593—webappsphp05 set 2006

Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Zix Forum 1.12 - 'RepId' SQL Injection (1)

CVE-2006-4612—webappsasp05 set 2006

SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AnnonceV News Script 1.1 - 'page' Remote File Inclusion

CVE-2006-4622—webappsphp05 set 2006

PHP remote file inclusion vulnerability in annonce.php in AnnonceV (aka annoncesV) 1.1 allows remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Easy Address Book Web Server 1.2 - Remote Format String

CVE-2006-4654—remotewindows04 set 2006

Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service (cr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Nuke MyHeadlines 4.3.1 Module - Cross-Site Scripting

CVE-2006-4563—webappsphp04 set 2006

Cross-site scripting (XSS) vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP-Proxima 6.0 - 'BB_Smilies.php' Local File Inclusion

CVE-2006-4631—webappsphp04 set 2006

Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote auth

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Yappa-ng 2.3.1 - 'admin_modules' Remote File Inclusion

CVE-2005-1312—webappsphp03 set 2006

PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Metasploit600

TikiWiki jhot Remote Command Execution

CVE-2006-4602—02 set 2006

Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execu

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.