Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

Microsoft PowerPoint 2003 - '.ppt' File Closure Memory Corruption

CVE-2006-3656—remotewindows14 jul 2006

Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a c

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft PowerPoint 2003 - 'powerpnt.exe' Remote Overflow

CVE-2006-3660—remotewindows14 jul 2006

Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to po

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (3)

CVE-2006-2451—locallinux13 jul 2006

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Dream4 Koobi Pro 5.6 - 'showtopic' SQL Injection

CVE-2006-3621—webappsphp13 jul 2006

SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PhotoCycle 1.0 - 'PhotoCycle.php' Cross-Site Scripting

CVE-2006-3680—webappsphp13 jul 2006

Cross-site scripting (XSS) vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Phorum 5 - 'pm.php' Arbitrary Local Inclusion

CVE-2006-3611—webappsphp13 jul 2006

Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FlatNuke 2.5.7 - 'index.php' Remote File Inclusion

CVE-2006-3608—webappsphp13 jul 2006

The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FlexWATCH 3.0 - 'AIndex.asp' Authentication Bypass

CVE-2006-3604—webappsasp12 jul 2006

Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access r

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FLV Players 8 - 'popup.php?url' Cross-Site Scripting

CVE-2006-3624—remotemultiple12 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FLV Players 8 - 'player.php?url' Cross-Site Scripting

CVE-2006-3624—remotemultiple12 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (2)

CVE-2006-2451—locallinux12 jul 2006

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - RevealTrans Denial of Service

CVE-2006-3605—doswindows12 jul 2006

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition pro

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Lazarus Guestbook 1.6 - 'codes-english.php?show' Cross-Site Scripting

CVE-2006-3616—webappsphp12 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Lazarus Guestbook 1.6 - 'picture.php?img' Cross-Site Scripting

CVE-2006-3616—webappsphp12 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SaPHPLesson 2.0 - 'add.php' SQL Injection

CVE-2006-2835—webappsphp11 jul 2006

SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) for

23RISCO

abrir ↗

Metasploit300

Microsoft SRV.SYS Mailslot Write Corruption

CVE-2006-3942—11 jul 2006

The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a de

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Office 2000/2002 - Property Code Execution

CVE-2006-2389—remotewindows11 jul 2006

Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allo

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (1)

CVE-2006-2451—locallinux11 jul 2006

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Fantastic Guestbook 2.0.1 - 'Guestbook.php' HTML Injection

CVE-2006-3568—webappsphp11 jul 2006

Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - TriEditDocument Denial of Service

CVE-2006-3591—doswindows11 jul 2006

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - 'HtmlDlgSafeHelper' Remote Denial of Service

CVE-2006-3511—doswindows10 jul 2006

Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Graffiti Forums 1.0 - 'Topics.php' SQL Injection

CVE-2006-3560—webappsphp10 jul 2006

SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Farsinews 3.0 - 'Tiny_mce_gzip.php' Directory Traversal

CVE-2006-3602—webappsphp10 jul 2006

Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SIPfoundry sipXtapi - 'CSeq' Remote Buffer Overflow (PoC)

CVE-2006-3524—doshardware10 jul 2006

Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Word 2000/2003 - Unchecked Boundary Condition

CVE-2006-3493—doswindows10 jul 2006

Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other

35RISCO

abrir ↗

Metasploit500

SIPfoundry sipXphone 2.6.0.27 CSeq Buffer Overflow

CVE-2006-3524—10 jul 2006

Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Metasploit500

AIM Triton 1.0.4 CSeq Buffer Overflow

CVE-2006-3524—10 jul 2006

Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Metasploit500

SIPfoundry sipXezPhone 0.35a CSeq Field Overflow

CVE-2006-3524—10 jul 2006

Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - Object.Microsoft.DXTFilter Denial of Service

CVE-2006-3512—doswindows09 jul 2006

Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled pr

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

CVE-2006-3392—remotemultiple09 jul 2006

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.