Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.324exploits catalogados

37.130CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.614GitHub PoC 15.330VulnCheck XDB 9.001Nuclei 4.401Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Ultimate WebBoard 3.00 - 'Category' SQL Injection

CVE-2008-4666—webappsphp

SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

ArabCMS - 'rss.php' Local File Inclusion

CVE-2008-4667—webappsphp

Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Pizza - 'manufacturers_id' SQL Injection

CVE-2008-5046—webappsphp

SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Rental Script - Authentication Bypass

CVE-2008-5047—webappsphp

SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bloggie Lite 0.0.2 Beta - Insecure Cookie Handling / SQL Injection

CVE-2008-5004—webappsphp

SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JooBlog 0.1.1 - 'PostID' SQL Injection

CVE-2008-5051—webappsphp

SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cheats Complete Website 1.1.1 - 'itemID' SQL Injection

CVE-2008-5170—webappsphp

SQL injection vulnerability in item.php in Cheats Complete Website 1.1.1 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easysitenetwork Jokes Complete Website 2.1.3 - 'jokeid' SQL Injection

CVE-2008-5174—webappsphp

SQL injection vulnerability in joke.php in Jokes Complete Website 2.1.3 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.62 - 'file://' Local Heap Overflow

CVE-2008-5178—localwindows

Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file://

35RISCO

abrir ↗

Referência✓ VexDay Proof

wPortfolio 0.3 - Arbitrary File Upload

CVE-2008-5220—webappsphp

Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Centreon 1.4.2.3 - 'get_image.php' Remote File Disclosure

CVE-2008-1119—webappsphp

Directory traversal vulnerability in include/doc/get_image.php in Centreon 1.4.2.3 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

eazyPortal 1.0 - 'cookie' SQL Injection

CVE-2008-1121—webappsphp

SQL injection vulnerability in index.php in eazyPortal 1.0 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi Pro 5.7 - 'categ' SQL Injection

CVE-2008-1122—webappsphp

SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

poweraward 1.1.0 rc1 - Local File Inclusion / Cross-Site Scripting

CVE-2008-5203—webappsphp

Cross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1 allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ Auction 6.2.1 - 'classifide_ad.php' SQL Injection

CVE-2008-5212—webappsphp

SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

FREEze Greetings 1.0 - Remote Password Retrieve

CVE-2008-5218—webappsphp

ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

pSys 0.7.0.a - 'shownews' SQL Injection

CVE-2008-5269—webappsphp

SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Clean CMS 1.5 - Blind SQL Injection

CVE-2008-5289—webappsphp

SQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 < 0.7.13 - 'usersettings.php' Blind SQL Injection

CVE-2008-5320—webappsphp

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo

CVE-2008-5322—webappsphp

Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, wh

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClipShare Pro 2006-2007 - 'chid' SQL Injection

CVE-2008-5489—webappsphp

SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

postecards - SQL Injection / File Disclosure

CVE-2008-5559—webappsasp

SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netref 4.0 - Multiple SQL Injections

CVE-2008-5561—webappsphp

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nukedit 4.9.x - Remote Create Admin

CVE-2008-5582—webappsphp

SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

lcxbbportal 0.1 alpha 2 - Remote File Inclusion

CVE-2008-5585—webappsphp

Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Product Sale Framework 0.1b - SQL Injection

CVE-2008-5590—webappsphp

SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

nightfall personal diary 1.0 - Cross-Site Scripting / File Disclosure

CVE-2008-5591—webappsphp

Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

eXchange POP3 5.0.050203 - RPCT TO Remote Buffer Overflow

CVE-2006-0537—remotewindows

Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execu

35RISCO

abrir ↗

Referência✓ VexDay Proof

BM Classifieds 20080409 - Multiple SQL Injections

CVE-2008-1272—webappsphp

Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

jspwiki 2.4.104/2.5.139 - Multiple Vulnerabilities

CVE-2008-1229—webappsjsp

Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject ar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.