Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.035exploits catalogados

39.531CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9.678Nuclei 4.478Metasploit 3.524✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Zeeways ZeeJobsite 2.0 - Arbitrary File Upload

CVE-2008-6913—webappsphp

Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated user

23RISCO

abrir ↗

Referência✓ VexDay Proof

GNUBoard 4.31.03 (08.12.29) - Local File Inclusion

CVE-2009-0290—webappsphp

Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

CYASK 3.x - 'neturl' Local File Disclosure

CVE-2008-4151—webappsphp

Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência✓ VexDay Proof

smcFanControl 2.1.2 (OSX) - Multiple Buffer Overflow Vulnerabilities (PoC)

CVE-2008-6252—dososx

Stack-based buffer overflow in the smc program in smcFanControl 2.1.2 allows local users to execute arbitrary code and g

23RISCO

abrir ↗

Referência✓ VexDay Proof

SpeedStream 5200 - Authentication Bypass Configuration Download

CVE-2008-6916—remotehardware

Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host

23RISCO

abrir ↗

Referência✓ VexDay Proof

Collabtive 0.4.8 - Cross-Site Scripting / Authentication Bypass / Arbitrary File Upload

CVE-2008-6948—webappsphp

Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code b

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_waticketsystem - Blind SQL Injection

CVE-2009-0333—webappsphp

SQL injection vulnerability in the WebAmoeba (WA) Ticket System (com_waticketsystem) component for Joomla! allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Real Estate Listings - 'search.php' SQL Injection

CVE-2008-4177—webappsphp

SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

FipsCMS 4.5 - 'index.asp' SQL Injection

CVE-2006-6115—webappsasp

SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPOCS 0.1-beta3 - 'act' Local File Inclusion

CVE-2008-4331—webappsphp

Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acc Real Estate 4.0 - Insecure Cookie Handling

CVE-2008-6293—webappsphp

admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access b

23RISCO

abrir ↗

Referência✓ VexDay Proof

DD-WRT HTTPd Daemon/Service - Remote Command Execution

CVE-2008-6975—remotehardware

Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijac

23RISCO

abrir ↗

Referência✓ VexDay Proof

fipsForum 2.6 - 'default2.asp' SQL Injection

CVE-2006-6116—webappsasp

SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Micro CMS 0.3.5 - 'microcms_path' Remote File Inclusion

CVE-2006-3144—webappsphp

PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.5

23RISCO

abrir ↗

Referência✓ VexDay Proof

TFTP Server for Windows 1.4 - ST Remote BSS Overflow

CVE-2008-2161—remotewindows

Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execut

50RISCO

abrir ↗

Referência✓ VexDay Proof

WebCMS Portal Edition - 'id' Blind SQL Injection

CVE-2008-4185—webappsphp

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Talkback 2.3.6 - Multiple Local File Inclusion / PHPInfo Disclosure Vulnerabilities

CVE-2008-4346—webappsphp

Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBalbum 2.4b - 'id' Blind SQL Injection

CVE-2009-0446—webappsphp

SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

SkaLinks 1.5 - Authentication Bypass

CVE-2009-0451—webappsphp

SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Adm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

CVE-2008-4207—webappsphp

Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

WholeHogSoftware Password Protect - Insecure Cookie Handling

CVE-2009-0461—webappsphp

Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative acce

23RISCO

abrir ↗

Referência✓ VexDay Proof

CJ Ultra Plus 1.0.4 - Cookie SQL Injection

CVE-2008-4241—webappsphp

SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Server - Code Execution (PoC) (MS08-067)

CVE-2008-4250CRITICALsob ataquedoswindows

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20

100RISCO

abrir ↗

Referência✓ VexDay Proof

cf shopkart 5.2.2 - SQL Injection / File Disclosure

CVE-2008-6320—webappsasp

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Euphonics Audio Player 1.0 - '.pls' Universal Local Buffer Overflow

CVE-2009-0476—localwindows

Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi

50RISCO

abrir ↗

Referência✓ VexDay Proof

e107 0.617 - Cross-Site Scripting Remote Cookie Disclosure

CVE-2005-2327—webappsphp

Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Mobile 6.0 - Device Long Name Remote Reboot (Denial of Service)

CVE-2008-4295—doshardware

Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to esta

35RISCO

abrir ↗

Referência✓ VexDay Proof

CF_Forum - Blind SQL Injection

CVE-2008-6324—webappsasp

SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

LoveCMS 1.6.2 Final (Download Manager 1.0) - Arbitrary File Upload

CVE-2008-7062—webappsphp

Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

A Better Member-Based ASP Photo Gallery - 'entry' SQL Injection

CVE-2009-0531—webappsphp

SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote atta

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.