Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

Exploit-DB✓ VexDay Proof

GTP iCommerce - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-0237—webappsphp16 jan 2006

Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apache Tomcat / Geronimo 1.0 - 'Sample Script cal2.jsp?time' Cross-Site Scripting

CVE-2006-0254—remotemultiple16 jan 2006

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary we

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bit 5 Blog 8.1 - 'index.php' SQL Injection

CVE-2006-0320—webappsphp16 jan 2006

SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

RedKernel Referrer Tracker 1.1.0-3 - 'Rkrt_stats.php' Cross-Site Scripting

CVE-2006-0317—webappsphp16 jan 2006

Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apache Geronimo 1.0 - Error Page Cross-Site Scripting

CVE-2006-0254—remotemultiple16 jan 2006

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary we

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

EZDatabase 2.1.1 - 'index.php' Cross-Site Scripting

CVE-2006-0315—webappsphp16 jan 2006

index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

BlogPHP 1.0 - 'index.php' SQL Injection

CVE-2006-0318—webappsphp16 jan 2006

SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to e

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bit 5 Blog 8.1 - 'addcomment.php' HTML Injection

CVE-2006-0361—webappsphp16 jan 2006

Cross-site scripting (XSS) vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Cerberus FTP Server 2.32 - Denial of Service

CVE-2006-0357—doswindows16 jan 2006

Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified d

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

SimpleBlog 2.1 - Multiple Input Validation Vulnerabilities

CVE-2006-0240—webappsasp16 jan 2006

Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-0251—webappscgi16 jan 2006

Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

White Album 2.5 - 'Pictures.php' SQL Injection

CVE-2006-0235—webappsphp16 jan 2006

SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir para

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Veritas NetBackup 4/5 - Volume Manager Daemon Remote Buffer Overflow

CVE-2005-3116—remotewindows16 jan 2006

Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterpri

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPXplorer 0.9.33 - 'Workspaces.php' Directory Traversal

CVE-2006-0244—webappsphp16 jan 2006

Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary fi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (2)

CVE-2006-0359—doswindows15 jan 2006

Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device cr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

HomeFtp 1.1 - 'NLST' Denial of Service

CVE-2006-0355—doswindows14 jan 2006

Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a lo

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MiniNuke 1.8.2 - Multiple SQL Injections

CVE-2006-0199—webappsasp14 jan 2006

SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Ultimate Auction 3.67 - Item.pl Cross-Site Scripting

CVE-2006-0217—webappscgi14 jan 2006

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Farmers WIFE 4.4 sp1 - 'FTP' Remote System Access

CVE-2006-0319—remotewindows14 jan 2006

Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

MiniNuke 1.8.2 - 'hid' SQL Injection

CVE-2006-0199—webappsasp14 jan 2006

SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Web Host Automation Ltd. Helm 3.2.8 - 'ForgotPassword.asp' Cross-Site Scripting

CVE-2006-0211—webappsasp13 jan 2006

Cross-site scripting (XSS) vulnerability in forgotPassword.asp in Helm Hosting Control Panel 3.2.8 and earlier allows re

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Xmame 0.102 - 'lang' Local Buffer Overflow

CVE-2006-0176—locallinux13 jan 2006

Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow loc

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Alstrasoft Template Seller Pro 3.25 - 'Fullview.php' Cross-Site Scripting

CVE-2006-0222—webappsphp13 jan 2006

Cross-site scripting (XSS) vulnerability in fullview.php in AlstraSoft Template Seller Pro allows remote attackers to in

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (1)

CVE-2006-0189—remotewindows12 jan 2006

Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a lo

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Fog Creek Software FogBugz 4.0 29 - 'default.asp' Cross-Site Scripting

CVE-2006-0194—webappsasp12 jan 2006

Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remot

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

TankLogger 2.4 General Functions Script - SQL Injection

CVE-2006-0209—webappsphp12 jan 2006

SQL injection vulnerability in general_functions.php in TankLogger 2.4 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Visual Studio - UserControl Remote Code Execution (2)

CVE-2006-0187—remotewindows12 jan 2006

By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserCon

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Visual Studio - UserControl Remote Code Execution (1)

CVE-2006-0187—remotewindows12 jan 2006

By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserCon

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)

CVE-2006-0189—remotewindows12 jan 2006

Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a lo

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Interspire TrackPoint NX - 'index.php' Cross-Site Scripting

CVE-2006-0210—webappsphp12 jan 2006

Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.