Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.853exploits catalogados

39.383CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9.651Nuclei 4.478Metasploit 3.523✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

XNova 0.8 sp1 - 'xnova_root_path' Remote File Inclusion

CVE-2008-6023—webappsphp

PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of Xnova, possibly 0.8 sp1,

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebLog - 'index.php' Remote File Disclosure

CVE-2007-1487—webappsphp

Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Platinum 7.6.b.5 - 'dynamic_titles.php' SQL Injection

CVE-2008-1539—webappsphp

SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

VMware Workstation 6.5.1 - 'hcmon.sys 6.0.0.45731' Local Denial of Service

CVE-2008-3761—doswindows

hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VM

23RISCO

abrir ↗

Referência✓ VexDay Proof

TopperMod 2.0 - SQL Injection

CVE-2008-1554—webappsphp

SQL injection vulnerability in account/index.php in TopperMod 2.0, when magic_quotes_gpc is disabled, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunShop Shopping Cart 4.1.4 - 'id' SQL Injection

CVE-2008-3768—webappsphp

Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netartmedia Jobs Portal 1.3 - Multiple SQL Injections

CVE-2008-6030—webappsphp

Multiple SQL injection vulnerabilities in NetArtMedia Jobs Portal 1.3 allow remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

CVE-2007-1596—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mambo

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoLAN VLC Media Player 0.8.6i - Mms Protocol Handling Heap Overflow (PoC)

CVE-2008-3794—dosmultiple

Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i all

28RISCO

abrir ↗

Referência✓ VexDay Proof

0irc-client 1345 build20060823 - Denial of Service

CVE-2007-1648—doswindows

0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash) by operating an IRC se

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS Module event 1.0 - Remote File Inclusion

CVE-2006-6800—webappsphp

PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module Flatmenu 1.07 - Remote File Inclusion

CVE-2007-1702—webappsphp

PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Free Image Hosting 2.0 - 'AD_BODY_TEMP' Remote File Inclusion

CVE-2007-1715—webappsphp

PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

C-Arbre 0.6PR7 - 'ROOT_PATH' Remote File Inclusion

CVE-2007-1721—webappsphp

Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbit

28RISCO

abrir ↗

Referência✓ VexDay Proof

MySpeach 3.0.7 - Local/Remote File Inclusion

CVE-2007-1896—webappsphp

Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

KISGB (tmp_theme) 5.1.1 - Local File Inclusion

CVE-2008-1635—webappsphp

Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

phsBlog 0.2 - Bypass SQL Injection Filtering

CVE-2008-4072—webappsphp

Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Titan FTP Server 6.26 build 630 - Remote Denial of Service

CVE-2008-6082—doswindows

Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO

50RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ownbiblio 1.5.3 - 'catid' SQL Injection

CVE-2008-6184—webappsphp

SQL injection vulnerability in the OwnBiblio (com_ownbiblio) component 1.5.3 for Joomla! allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Beryo 2.0 - 'downloadpic.php?chemin' Remote File Disclosure

CVE-2007-1929—webappsphp

Directory traversal vulnerability in downloadpic.php in Beryo 2.0, and possibly other versions including 2.4, allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

PcP-Guestbook 3.0 - 'lang' Local File Inclusion

CVE-2007-1933—webappsphp

Multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 allow remote attackers to include and execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prediction Football 1.x - 'matchid' SQL Injection

CVE-2008-1732—webappsphp

SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Linux Kernel < 2.6.26.4 - SCTP Kernel Memory Disclosure

CVE-2008-4113—locallinux

The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implemen

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Hosting Index - 'id' SQL Injection

CVE-2008-6115—webappsphp

SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

EgyPlus 7ml 1.0.1 - Authentication Bypass

CVE-2009-2167—webappsphp

Multiple SQL injection vulnerabilities in cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier, when magic_quo

23RISCO

abrir ↗

Referência✓ VexDay Proof

pl-PHP Beta 0.9 - Multiple Vulnerabilities

CVE-2007-2006—webappsphp

Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

ForumApp 3.3 - Remote Database Disclosure

CVE-2008-6147—webappsasp

ForumApp 3.3 stores sensitive information under the web root with insufficient access control, which allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.0 - Arbitrary Delete (Category/Account)

CVE-2008-7181—webappsphp

Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

xoops module tsdisplay4xoops 0.1 - Remote File Inclusion

CVE-2007-2091—webappsphp

PHP remote file inclusion vulnerability in blocks/tsdisplay4xoops_block2.php in tsdisplay4xoops (TSD4XOOPS, aka the Team

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Mod Small ShoutBox 1.4 - Remote Edit/Delete Messages

CVE-2008-6301—webappsphp

SQL injection vulnerability in shoutbox_view.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to e

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.