Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

ThWboard 2.8 - 'showtopic.php' SQL Injection

CVE-2006-1926—webappsphp19 abr 2006

SQL injection vulnerability in showtopic.php in ThWboard 2.84 beta 3 and earlier allows remote attackers to execute arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

xFlow 5.46.11 - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1850—webappscgi19 abr 2006

Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ModernBill 4.3 - 'user.php' SQL Injection

CVE-2006-1853—webappsphp19 abr 2006

Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execu

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Visale 1.0 - 'pblscg.cgi?catsubno' Cross-Site Scripting

CVE-2006-1946—webappscgi19 abr 2006

Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ContentBoxx - 'login.php' Cross-Site Scripting

CVE-2006-1971—webappsphp19 abr 2006

Cross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BannerFarm 2.3 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-1950—webappscgi19 abr 2006

Multiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remote

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CommuniMail 1.2 - 'mailadmin.cgi?list_id' Cross-Site Scripting

CVE-2006-1944—webappscgi19 abr 2006

Multiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and earlier allow remote attackers to inj

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

otalCalendar - 'about.php?inc_dir' Remote File Inclusion

CVE-2006-1922—webappsphp19 abr 2006

PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to exe

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Visale 1.0 - 'pbpgst.cgi?keyval' Cross-Site Scripting

CVE-2006-1946—webappscgi19 abr 2006

Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Plexum PlexCart X5 - Multiple SQL Injections

CVE-2006-1947—webappsphp19 abr 2006

Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cisco Wireless Lan Solution Engine - ArchiveApplyDisplay.jsp Cross-Site Scripting

CVE-2006-1960—webappsjsp19 abr 2006

Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution E

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Article Publisher 1.0.1 Pro - Multiple SQL Injections

CVE-2006-1852—webappsphp19 abr 2006

SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

xFlow 5.46.11 - 'index.cgi' Multiple SQL Injections

CVE-2006-1849—webappscgi19 abr 2006

Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPLinks 2.1.2/2.1.3 - 'index.php' Cross-Site Scripting

CVE-2006-1825—webappsphp18 abr 2006

Cross-site scripting (XSS) vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows remote attackers to inject

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPLister 0.4.1 - 'index.php' Cross-Site Scripting

CVE-2006-1906—webappsphp18 abr 2006

Cross-site scripting (XSS) vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arbi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Xine 0.9/1.0 - Playlist Handling Remote Format String

CVE-2006-1905—doslinux18 abr 2006

Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

RechnungsZentrale 2 1.1.3 - 'Authent.php4' SQL Injection

CVE-2006-1954—webappsphp18 abr 2006

SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earli

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MyBB 1.1 - Global Variable Overwrite

CVE-2006-1912—webappsphp17 abr 2006

MyBB (MyBulletinBoard) 1.1.0 does not set the constant KILL_GLOBAL variable in (1) global.php and (2) inc/init.php, whic

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Calendarix 0.7 - 'YearCal.php' Cross-Site Scripting

CVE-2006-1835—webappsphp17 abr 2006

Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Jax Guestbook 3.50 - 'Page' Cross-Site Scripting

CVE-2006-1913—webappsphp17 abr 2006

Cross-site scripting (XSS) vulnerability in jax_guestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DbbS 2.0 - Multiple Input Validation Vulnerabilities

CVE-2006-1916—webappsphp17 abr 2006

Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Coppermine 1.4.4 - 'index.php' Local File Inclusion

CVE-2006-1909—webappsphp17 abr 2006

Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Monster Top List 1.4 - 'functions.php' Remote File Inclusion

CVE-2006-1781—webappsphp17 abr 2006

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPFaber TopSites - 'index.php' Cross-Site Scripting

CVE-2006-1878—webappsphp17 abr 2006

Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Symantec Sygate Management Server - 'LOGIN' SQL Injection (Metasploit)

CVE-2006-0522—webappscgi15 abr 2006

SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Tiny Web Gallery 1.4 - 'index.php' Cross-Site Scripting

CVE-2006-1802—webappsphp15 abr 2006

Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject ar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPAlbum 0.2.2/0.2.3/4.1 - 'Language.php' File Inclusion

CVE-2006-1839—webappsphp15 abr 2006

PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows r

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MODx CMS 0.9.1 - 'index.php' Cross-Site Scripting

CVE-2006-1820—webappsphp14 abr 2006

Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MODx CMS 0.9.1 - 'index.php' Directory Traversal

CVE-2006-1821—webappsphp14 abr 2006

Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. (d

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

AR-Blog 5.2 - 'print.php' Cross-Site Scripting

CVE-2006-1893—webappsphp14 abr 2006

Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.