Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Metasploit300

Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow

CVE-2006-2086—26 abr 2006

Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juni

50RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 5.0.1 - Modal Dialog Manipulation

CVE-2006-2094—remotewindows26 abr 2006

Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is conf

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DevBB 1.0 - 'member.php' Cross-Site Scripting

CVE-2006-2070—webappsphp26 abr 2006

Cross-site scripting (XSS) vulnerability in member.php in DevBB 1.0.0 and earlier allows remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Oracle 10g Release 2 - 'DBMS_EXPORT_EXTENSION' SQL

CVE-2006-2081—localmultiple26 abr 2006

Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADA

43RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Invision Power Board 2.1.5 - 'lastdate' Remote Code Execution

CVE-2006-2059—webappsphp26 abr 2006

action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execut

23RISCO

abrir ↗

Metasploit300

Oracle DB SQL Injection via DBMS_EXPORT_EXTENSION

CVE-2006-2081—26 abr 2006

Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADA

43RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Instant Photo Gallery 1.0 - 'member.php?member' Cross-Site Scripting

CVE-2006-2052—webappsphp25 abr 2006

Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Instant Photo Gallery 1.0 - 'portfolio_photo_popup.php?id' Cross-Site Scripting

CVE-2006-2052—webappsphp25 abr 2006

Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2categories.php?b2inc' Remote File Inclusion

CVE-2007-2290—webappsphp25 abr 2006

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PhotoKorn 1.53/1.54 - 'id' SQL Injection

CVE-2006-2040—webappsphp25 abr 2006

Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPWebFTP 2.3 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-2048—webappsphp25 abr 2006

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cartweaver 2.16.11 - 'Results.cfm' SQL Injection

CVE-2006-2046—webappscfm25 abr 2006

Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote at

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NextAge Shopping Cart - Multiple HTML Injection Vulnerabilities

CVE-2006-2051—webappsphp25 abr 2006

Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2archives.php?b2inc' Remote File Inclusion

CVE-2007-2290—webappsphp25 abr 2006

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PhotoKorn 1.53/1.54 - 'print.php?cat' SQL Injection

CVE-2006-2040—webappsphp25 abr 2006

Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Fenice Oms 1.10 - GET Remote Buffer Overflow

CVE-2006-2022—remotelinux25 abr 2006

Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remote

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Instant Photo Gallery 1.0 - 'portfolio.php?cat_id' Cross-Site Scripting

CVE-2006-2079—webappsphp25 abr 2006

Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2,

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2mail.php?b2inc' Remote File Inclusion

CVE-2007-2290—webappsphp25 abr 2006

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PhotoKorn 1.53/1.54 - 'index.php' Multiple SQL Injections

CVE-2006-2040—webappsphp25 abr 2006

Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mozilla Firefox 1.5.0.2 - 'js320.dll/xpcom_core.dll' Denial of Service (PoC)

CVE-2006-1993—dosmultiple24 abr 2006

Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly e

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Scry Gallery 1.1 - 'index.php' Cross-Site Scripting

CVE-2006-2001—webappsphp24 abr 2006

Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary we

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BK Forum 4.0 - 'member.asp' SQL Injection

CVE-2005-1287—webappsasp24 abr 2006

Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

FlexBB 0.5.5 - '/function/showprofile.php' SQL Injection

CVE-2006-2034—webappsphp24 abr 2006

SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Blender 2.36 - '.BVF' File Import Python Code Execution

CVE-2005-3302HIGHwebappscgi24 abr 2006

Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hi

41RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenTTD 0.4.7 - Multiple Vulnerabilities

CVE-2006-1998—dosmultiple23 abr 2006

OpenTTD 0.4.7 and earlier allows local users to cause a denial of service (application exit) via a large invalid error n

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

OpenTTD 0.4.7 - Multiple Vulnerabilities

CVE-2006-1999—dosmultiple23 abr 2006

The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an inco

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Clansys 1.1 - 'index.php' PHP Code Insertion

CVE-2006-2005—webappsphp23 abr 2006

Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP c

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Skulltag 0.96f - Version String Remote Format String (PoC)

CVE-2006-2012—doswindows23 abr 2006

Format string vulnerability in Skulltag 0.96f and earlier allows remote attackers to cause a denial of service via the v

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

My Gaming Ladder Combo System 7.0 - Remote Code Execution

CVE-2006-2002—webappsphp22 abr 2006

PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Simplog 0.9.3 - 'ImageList.php' Cross-Site Scripting

CVE-2006-2028—webappsphp22 abr 2006

Cross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote att

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.