Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.324exploits catalogados

37.130CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.614GitHub PoC 15.330VulnCheck XDB 9.001Nuclei 4.401Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

SH-News 3.0 - 'comments.php' SQL Injection

CVE-2007-6391—webappsphp

SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ace Image Hosting Script - 'id' SQL Injection

CVE-2007-6393—webappsphp

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flat PHP Board 1.2 - Multiple Vulnerabilities

CVE-2007-6399—webappsphp

index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current use

23RISCO

abrir ↗

Referência✓ VexDay Proof

eSyndiCat Link Exchange Script 2005-2006 - SQL Injection

CVE-2007-6543—webappsphp

SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

CVE-2007-6544—webappsphp

Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

TeamCalPro 3.1.000 - Multiple Local/Remote File Inclusions

CVE-2007-6553—webappsphp

Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion

CVE-2007-6555—webappsphp

PHP remote file inclusion vulnerability in modules/mod_pxt_latest.php in the mosDirectory (com_directory) 2.3.2 componen

23RISCO

abrir ↗

Referência✓ VexDay Proof

zBlog 1.2 - SQL Injection

CVE-2007-6577—webappsphp

Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

1024 CMS 1.4.2 - Local File Inclusion / Blind SQL Injection

CVE-2008-1911—webappsphp

SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magic_quotes_gpc is disabled

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP ZLink 0.3 - 'go.php' SQL Injection

CVE-2007-6578—webappsphp

SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wallpaper Site 1.0.09 - 'category.php' SQL Injection

CVE-2007-6580—webappsphp

Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

1024 CMS 1.3.1 - Local File Inclusion / SQL Injection

CVE-2007-6584—webappsphp

Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary l

23RISCO

abrir ↗

Referência✓ VexDay Proof

NmnNewsletter 1.0.7 - 'output' Remote File Inclusion

CVE-2007-6585—webappsphp

PHP remote file inclusion vulnerability in confirmUnsubscription.php in NmnNewsletter 1.0.7 allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

SkyFex Client 1.0 - ActiveX 'Start()' Method Remote Stack Overflow

CVE-2007-6605—doswindows

Buffer overflow in a certain ActiveX control in SkyFexClient.ocx 1.0.2.77 in SkyFex Client 1.0 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

AlkalinePHP 0.80.00 Beta - 'thread.php' SQL Injection

CVE-2008-2395—webappsphp

SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

FicHive 1.0 - 'category' Blind SQL Injection

CVE-2008-2416—webappsphp

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZenPhoto 1.1.3 - 'rss.php?albumnr' SQL Injection

CVE-2007-6666—webappsphp

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyPHP Forum 3.0 (Final) - Multiple SQL Injections

CVE-2007-6667—webappsphp

SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Site@School 2.4.10 - Blind SQL Injection

CVE-2008-0129—webappsphp

SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

emagiC CMS.Net 4.0 - 'emc.asp' SQL Injection

CVE-2007-5783—webappsasp

SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

CaupoShop Pro 2.x - 'action' Remote File Inclusion

CVE-2007-5784—webappsphp

PHP remote file inclusion vulnerability in index.php in CaupoShop Pro 2.x allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tribisur 2.0 - SQL Injection

CVE-2008-0133—webappsphp

Multiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

LoudBlog 0.6.1 - 'parsedpage' Remote Code Execution

CVE-2008-0139—webappsphp

Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to exec

28RISCO

abrir ↗

Referência✓ VexDay Proof

1Book Guestbook Script 1.0.1 - Code Execution

CVE-2008-2638—webappsphp

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Link Directory Script - SQL Injection

CVE-2007-5996—webappsphp

SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClipShare < 3.0.1 - 'tid' SQL Injection

CVE-2008-2793—webappsphp

SQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

samPHPweb 4.2.2 - 'songinfo.php' SQL Injection

CVE-2008-0187—webappsphp

SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

doITlive CMS 2.50 - SQL Injection / Cross-Site Scripting

CVE-2008-2842—webappsasp

Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

BoatScripts Classifieds - 'type' SQL Injection

CVE-2008-2846—webappsphp

SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.10 - Multiple Vulnerabilities

CVE-2008-0382—webappsphp

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.