Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.324exploits catalogados

37.130CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.614GitHub PoC 15.330VulnCheck XDB 9.001Nuclei 4.401Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Polaring 0.04.03 - 'general.php' Remote File Inclusion

CVE-2006-5078—webappsphp

PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

paBugs 2.0 Beta 3 - 'class.mysql.php' Remote File Inclusion

CVE-2006-5079—webappsphp

PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

evoBB 0.3 - 'path' Remote File Inclusion

CVE-2006-5087—webappsphp

Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Millewin 13.39.146.1 - Local Privilege Escalation

CVE-2021-3394—localwindows

Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder per

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dimension of phpBB 0.2.6 - 'phpbb_root_path' Remote File Inclusions

CVE-2006-5222—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeForum 0.9.7 - 'forum.php' Remote File Inclusion

CVE-2006-5230—webappsphp

PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ciamos CMS 0.9.6b - 'config.php' Remote File Inclusion

CVE-2006-5257—webappsphp

PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System (CMS) 0.

23RISCO

abrir ↗

Referência✓ VexDay Proof

compteur 2.0 - 'param_editor.php' Remote File Inclusion

CVE-2006-5259—webappsphp

PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyNews 1.4 - 'cfg_include_dir' Remote File Inclusion

CVE-2006-5261—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyAgenda 3.1 - '/templates/header.php3' Local File Inclusion

CVE-2006-5263—webappsphp

Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to inc

23RISCO

abrir ↗

Referência✓ VexDay Proof

Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow (Denial of Service) (PoC)

CVE-2006-5276—dosmultiple

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire I

60RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Office 2003 - '.PPT' Local Buffer Overflow (PoC)

CVE-2006-5296—doswindows

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record

28RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB lat2cyr Mod 1.0.1 - 'lat2cyr.php' Remote File Inclusion

CVE-2006-5305—webappsphp

PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Conference Systems 1.1.4 - 'fullpath' File Inclusion

CVE-2006-5308—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

TribunaLibre 3.12 Beta - 'ftag.php' Remote File Inclusion

CVE-2006-5314—webappsphp

PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

registroTL - 'main.php' Remote File Inclusion

CVE-2006-5315—webappsphp

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

eboli - 'index.php' Remote File Inclusion

CVE-2006-5317—webappsphp

PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Album Photo Sans Nom 1.6 - Remote Source Disclosure

CVE-2006-5320—webappsphp

Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary fi

23RISCO

abrir ↗

Referência✓ VexDay Proof

QnECMS 2.5.6 - 'adminfolderpath' Remote File Inclusion

CVE-2006-5627—webappsphp

Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitra

28RISCO

abrir ↗

Referência✓ VexDay Proof

Free Image Hosting 1.0 - 'forgot_pass.php' File Inclusion

CVE-2006-5670—webappsphp

PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

iPrimal Forums - '/admin/index.php' Remote File Inclusion

CVE-2006-5788—webappsphp

PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

CVE-2006-5795—webappsphp

Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Soholaunch Pro 4.9 r36 - Remote File Inclusion

CVE-2006-5796—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Soholaunch Pro Edition 4.9 r46 and earlier, when register_globals

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

CVE-2006-5811—webappsphp

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

LimeSurvey 4.1.11 - 'File Manager' Path Traversal

CVE-2020-11455—webappsphp

LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileM

60RISCO

abrir ↗

Referência✓ VexDay Proof

blogme 3.0 - Cross-Site Scripting / Authentication Bypass

CVE-2006-5975—webappsasp

Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Foxit Reader 9.7.1 - Remote Command Execution (Javascript API)

CVE-2020-14425—localwindows

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can exe

35RISCO

abrir ↗

Referência✓ VexDay Proof

SimpleBlog 2.3 - '/admin/edit.asp' SQL Injection

CVE-2006-6191—webappsasp

SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Songbird Media Player 0.2 - Format String Denial of Service (PoC)

CVE-2006-6250—doswindows

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of servic

23RISCO

abrir ↗

Referência✓ VexDay Proof

VUPlayer 2.44 - '.m3u' UNC Name Buffer Overflow (Metasploit)

CVE-2006-6251—remotewindows

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long st

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.