Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.035exploits catalogados

39.531CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9.678Nuclei 4.478Metasploit 3.524✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

AdMan 1.1.20070907 - 'campaignId' SQL Injection

CVE-2008-6156—webappsphp

SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPwebnews 0.2 MySQL Edition - 'id_kat' SQL Injection

CVE-2008-6813—webappsphp

SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

UBBCentral UBB.Threads 6.4.x < 6.5.2 - 'thispath' Remote File Inclusion

CVE-2006-2568—webappsphp

PHP remote file inclusion vulnerability in addpost_newpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial) allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Back-End CMS 0.7.2.2 - 'BE_config.php' Remote File Inclusion

CVE-2006-2682—webappsphp

PHP remote file inclusion vulnerability in BE_config.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPVID 0.9.9 - 'categories_type.php' SQL Injection

CVE-2007-3610—webappsphp

SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

AWStats Totals 1.14 - 'AWStatstotals.php' Remote Code Execution

CVE-2008-3922—webappsphp

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences

50RISCO

abrir ↗

Referência✓ VexDay Proof

Fonality trixbox - 'langChoice' Local File Inclusion (connect-back) (2)

CVE-2008-6825—webappslinux

Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to

43RISCO

abrir ↗

Referência✓ VexDay Proof

gxine 0.5.6 - HTTP Plugin Remote Buffer Overflow (PoC)

CVE-2006-2802—doslinux

Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial o

28RISCO

abrir ↗

Referência✓ VexDay Proof

AssoCIateD CMS 1.1.3 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-2841—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Redaxo 3.2 - 'INCLUDE_PATH' Remote File Inclusion

CVE-2006-2844—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

SerWeb 0.9.4 - 'load_lang.php' Remote File Inclusion

CVE-2007-3358—webappsphp

PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to exe

35RISCO

abrir ↗

Referência✓ VexDay Proof

Words tag script 1.2 - 'word' SQL Injection

CVE-2008-3945—webappsphp

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Redaxo 3.2 - 'INCLUDE_PATH' Remote File Inclusion

CVE-2006-2845—webappsphp

PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

CS-Cart 1.3.3 - 'classes_dir' Remote File Inclusion

CVE-2006-2863—webappsphp

PHP remote file inclusion vulnerability in class.cs_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wikiwig 4.1 - 'wk_lang.php' Remote File Inclusion

CVE-2006-2888—webappsphp

PHP remote file inclusion vulnerability in _wk/wk_lang.php in Wikiwig 4.1 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Friendly Technologies - Read/Write Registry/Read Files

CVE-2008-4050—remotewindows

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

D-iscussion Board 3.01 - 'topic' Local File Inclusion

CVE-2008-4075—webappsphp

Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

FunkBoard CF0.71 - 'profile.php' Remote User Pass Change

CVE-2006-2896—webappsphp

profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form fie

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sitellite CMS 4.2.12 - '559668.php' Remote File Inclusion

CVE-2007-3228—webappsphp

PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CM

35RISCO

abrir ↗

Referência✓ VexDay Proof

EasyClassifields 3.0 - 'go' SQL Injection

CVE-2008-4084—webappsphp

SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Document Management System 1.1.4 - Authentication Bypass

CVE-2008-6220—webappsphp

SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earli

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Podcast 1.0 - Remote Insecure Cookie Handling

CVE-2008-6857—webappsphp

Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.541 - '.mp3'/'.aiff' File Multiple Denial of Service Vulnerabilities

CVE-2009-0263—doswindows

Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly e

28RISCO

abrir ↗

Referência✓ VexDay Proof

Enterprise Payroll Systems 1.1 - 'footer' Remote File Inclusion

CVE-2006-2982—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier all

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Smiley 1.0 - 'default.asp' Authentication Bypass / SQL Injection

CVE-2006-5952—webappsasp

SQL injection vulnerability in admin/default.asp in ASP Smiley 1.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

myPHPNuke < 1.8.8_8rc2 - 'artid' SQL Injection

CVE-2008-4092—webappsphp

SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yourownbux 3.1/3.2 Beta - SQL Injection

CVE-2008-4093—webappsphp

SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASPSiteWare Automotive Dealer 1.0/2.0 - SQL Injection

CVE-2008-6874—webappsphp

Multiple SQL injection vulnerabilities in ASP SiteWare autoDealer 1 and 2 allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

X10media Mp3 Search Engine 1.5.5 - Remote File Inclusion

CVE-2008-4141—webappsphp

Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

addalink 4 - 'category_id' SQL Injection

CVE-2008-4145—webappsphp

SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when magic_quotes_gpc is disabled

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.