Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.292exploits catalogados

37.129CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.614GitHub PoC 15.329VulnCheck XDB 8.970Nuclei 4.401Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

matpo bilder galerie 1.1 - Remote File Inclusion

CVE-2007-6649—webappsphp

PHP remote file inclusion vulnerability in includes/tumbnail.php in MatPo Bilder Galerie 1.1 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver R2 CMS - Arbitrary File Upload / Disclosure

CVE-2007-6650—webappsphp

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver R2 CMS - Arbitrary File Upload / Disclosure

CVE-2007-6651—webappsphp

Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive infor

23RISCO

abrir ↗

Referência✓ VexDay Proof

XCMS 1.83 - Remote Command Execution

CVE-2007-6652—webappsphp

cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mihalism Multi Host 2.0.7 - 'download.php' Remote File Disclosure

CVE-2007-6653—webappsphp

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Smeego 1.0 - 'Cookie lang' Local File Inclusion

CVE-2008-2352—webappsphp

Directory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Archangel Weblog 0.90.02 - 'post_id' SQL Injection

CVE-2008-2356—webappsphp

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebPortal CMS 0.6-beta - Remote Password Change

CVE-2008-0142—webappsphp

Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Shop-Script 2.0 - 'index.php' Remote File Disclosure

CVE-2008-0158—webappsphp

Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Link Directory Script - SQL Injection

CVE-2007-5996—webappsphp

SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClipShare < 3.0.1 - 'tid' SQL Injection

CVE-2008-2793—webappsphp

SQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

samPHPweb 4.2.2 - 'songinfo.php' SQL Injection

CVE-2008-0187—webappsphp

SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

doITlive CMS 2.50 - SQL Injection / Cross-Site Scripting

CVE-2008-2842—webappsasp

Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

BoatScripts Classifieds - 'type' SQL Injection

CVE-2008-2846—webappsphp

SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.10 - Multiple Vulnerabilities

CVE-2008-0382—webappsphp

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via

35RISCO

abrir ↗

Referência✓ VexDay Proof

project alumni 1.0.9 - Cross-Site Scripting / SQL Injection

CVE-2007-6126—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

WorkingOnWeb 2.0.1400 - 'events.php' SQL Injection

CVE-2007-6128—webappsphp

SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Content Injector 1.52 - 'index.php?cat' SQL Injection

CVE-2007-6137—webappsphp

SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Small Axe 0.3.1 - 'cfile' Remote File Inclusion

CVE-2008-0376—webappsphp

PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute

35RISCO

abrir ↗

Referência✓ VexDay Proof

Crystal Reports XI Release 2 (Enterprise Tree Control) - ActiveX Buffer Overflow (Denial of Service) (PoC)

CVE-2008-0379—doswindows

Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release

23RISCO

abrir ↗

Referência✓ VexDay Proof

alitalk 1.9.1.1 - Multiple Vulnerabilities

CVE-2008-0391—webappsphp

inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual Basic Enterprise 6 SP6 - '.dsr' File Handling Buffer Overflow

CVE-2008-0392—localwindows

Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to e

35RISCO

abrir ↗

Referência✓ VexDay Proof

Gradman 0.1.3 - 'info.php' Local File Inclusion

CVE-2008-0393—webappsphp

Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

aflog 1.01 - Cross-Site Scripting / SQL Injection

CVE-2008-0397—webappsphp

Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eurologon CMS - Multiple SQL Injections

CVE-2007-6164—webappsphp

Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

SafeNet 10.4.0.12 - 'IPSecDrv.sys' Local kernel Ring0 SYSTEM

CVE-2008-0573—localwindows

IPSecDrv.sys 10.4.0.12 in SafeNET HighAssurance Remote and SoftRemote allows local users to gain privileges via a crafte

23RISCO

abrir ↗

Referência✓ VexDay Proof

All Club CMS 0.0.2 - 'index.php' SQL Injection

CVE-2008-0601—webappsphp

SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

All Club CMS 0.0.1f - 'index.php' Local File Inclusion

CVE-2008-0602—webappsphp

Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to inc

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_awesom' 0.3.2 - 'listid' SQL Injection

CVE-2008-0603—webappsphp

SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

bilboblog 2.1 - Multiple Vulnerabilities

CVE-2008-3303—webappsphp

admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.