Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

free QBoard 1.1 - 'features.php?qb_path' Remote File Inclusion

CVE-2006-3475—webappsphp03 jul 2006

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Glossaire 1.7 - Remote File Inclusion

CVE-2006-3363—webappsphp03 jul 2006

PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to ex

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

free QBoard 1.1 - 'index.php?qb_path' Remote File Inclusion

CVE-2006-3475—webappsphp03 jul 2006

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

free QBoard 1.1 - 'delete.php?qb_path' Remote File Inclusion

CVE-2006-3475—webappsphp03 jul 2006

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 6 - ADODB.Recordset Filter Property Denial of Service

CVE-2006-3354—doswindows03 jul 2006

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter propert

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Vincent Leclercq News 5.2 - Cross-Site Scripting

CVE-2006-3385—webappsphp03 jul 2006

Cross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

free QBoard 1.1 - 'history.php?qb_path' Remote File Inclusion

CVE-2006-3475—webappsphp03 jul 2006

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

free QBoard 1.1 - 'contact.php?qb_path' Remote File Inclusion

CVE-2006-3475—webappsphp03 jul 2006

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

free QBoard 1.1 - 'about.php?qb_path' Remote File Inclusion

CVE-2006-3475—webappsphp03 jul 2006

Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Plume CMS 1.0.4 - 'search.php?_PX_config[manager_path]' Remote File Inclusion

CVE-2006-3562—webappsphp03 jul 2006

PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

QTO File Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-3405—webappsphp03 jul 2006

Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow

CVE-2006-3325—doswindows02 jul 2006

client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier all

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow

CVE-2006-3324—doswindows02 jul 2006

The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quake 3 Engine Client (Windows x86) - CS_ITEms Remote Overflow

CVE-2006-3325—doswindows_x8602 jul 2006

client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier all

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SturGeoN Upload - Arbitrary File Upload

CVE-2006-3381—webappsphp01 jul 2006

SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then di

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Plume CMS 1.1.3 - 'dbinstall.php' Remote File Inclusion

CVE-2006-7021—webappsphp01 jul 2006

PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SmartSite CMS 1.0 - 'root' Multiple Remote File Inclusions

CVE-2006-3421—webappsphp01 jul 2006

PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Diesel Joke Site - 'Category.php' SQL Injection

CVE-2006-3763—webappsphp01 jul 2006

SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Stud.IP 1.3.0-2 - Multiple Remote File Inclusions

CVE-2006-3361—webappsphp01 jul 2006

PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - TCP/IP Protocol Driver Remote Buffer Overflow

CVE-2006-2379—doswindows30 jun 2006

Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and ear

35RISCO

abrir ↗

Metasploit300

Webmin File Disclosure

CVE-2006-3392—30 jun 2006

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz Banner Exchange Script 1.0 - 'lostpassword.php?PHPSESSID' Cross-Site Scripting

CVE-2006-3607—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz Banner Exchange Script 1.0 - 'insertmember.php?city' Cross-Site Scripting

CVE-2006-3607—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz Banner Exchange Script 1.0 - 'index.php?PHPSESSID' Cross-Site Scripting

CVE-2006-3607—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

newsPHP 2006 PRO - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-3358—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SoftBiz Banner Exchange Script 1.0 - 'gen_confirm_mem.php?PHPSESSID' Cross-Site Scripting

CVE-2006-3607—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - RRAS RASMAN Registry Stack Overflow (MS06-025) (Metasploit)

CVE-2006-2370—remotewindows29 jun 2006

Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serve

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

newsPHP 2006 PRO - '/inc/rss_feed.php?category' SQL Injection

CVE-2006-3359—webappsphp29 jun 2006

Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

newsPHP 2006 PRO - 'index.php' Multiple SQL Injections

CVE-2006-3358—webappsphp29 jun 2006

Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPClassifieds.Info - Multiple Input Validation Vulnerabilities

CVE-2006-3329—webappsphp28 jun 2006

SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.