Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.035exploits catalogados

39.531CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9.678Nuclei 4.478Metasploit 3.524✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

PHP infoBoard 7 - Plus Insecure Cookie Handling

CVE-2008-4334—webappsphp

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the in

23RISCO

abrir ↗

Referência✓ VexDay Proof

SailPlanner 0.3a - Authentication Bypass

CVE-2008-7077—webappsphp

Multiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

w3blabor CMS 3.3.0 - Authentication Bypass

CVE-2009-0597—webappsphp

SQL injection vulnerability in admin/index.php in w3b>cms (aka w3blabor CMS) before 3.4.0, when magic_quotes_gpc is disa

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmartSite CMS 1.0 - 'root' Remote File Inclusion

CVE-2006-3162—webappsphp

PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

VMware Inc 6.0.0 - 'vielib.dll 2.2.5.42958' Remode Code Execution

CVE-2007-4058—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows

28RISCO

abrir ↗

Referência✓ VexDay Proof

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting / SQL Injection

CVE-2008-4336—webappsphp

Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to i

23RISCO

abrir ↗

Referência✓ VexDay Proof

pNews 2.03 - 'newsid' SQL Injection

CVE-2008-4347—webappsphp

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

k-rate - SQL Injection / Cross-Site Scripting

CVE-2008-7098—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe Acrobat Reader - JBIG2 Local Buffer Overflow (PoC) (2)

CVE-2009-0658—doswindows

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitra

60RISCO

abrir ↗

Referência✓ VexDay Proof

pForum 1.30 - 'showprofil.php' SQL Injection

CVE-2008-4355—webappsphp

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ 3.2.7 - 'vdlptokn.sys' Local Denial of Service

CVE-2008-4362—doswindows

The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (syst

23RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.7 - 'probe read' Local Kernel Denial of Service (PoC)

CVE-2008-4363—doswindows

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Volunteer 2.0 - SQL Injection

CVE-2008-6337—webappsphp

SQL injection vulnerability in the Volunteer Management System (com_volunteer) module 2.0 for Joomla! allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Facil-CMS 0.1RC - Multiple Local File Inclusions

CVE-2008-7176—webappsphp

Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

smNews 1.0 - Authentication Bypass / Column Truncation

CVE-2009-0750—webappsphp

SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

RM Downloader 3.0.0.9 - '.RAM' Local Buffer Overflow

CVE-2009-1646—localwindows

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows XP/2003 - IGMP v3 Denial of Service (MS06-007) (1)

CVE-2006-0021—doswindows

Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang)

35RISCO

abrir ↗

Referência✓ VexDay Proof

The Bible Portal Project 2.12 - 'destination' File Inclusion

CVE-2006-3177—webappsphp

PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Stats Generator 2.1.1 - SQL Injection

CVE-2006-3184—webappsasp

Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

ParsaWeb CMS - 'Search' SQL Injection

CVE-2008-4364—webappsasp

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hex Workshop 6.0 - '.hex' Local Code Execution

CVE-2009-0812—localwindows

Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live TV Script - 'index.php?mid' SQL Injection

CVE-2008-4376—webappsphp

SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hot Links SQL-PHP 3 - 'report.php' Multiple Vulnerabilities

CVE-2008-4379—webappsphp

Cross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ad Manager Pro 2.6 - 'ipath' Remote File Inclusion

CVE-2006-3192—webappsphp

PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

BandSite CMS 1.1.1 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-3193—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, al

28RISCO

abrir ↗

Referência✓ VexDay Proof

CHILKAT ASP String - 'CkString.dll 1.1 SaveToFile()' Insecure Method

CVE-2007-4252—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blue Eye CMS 1.0.0 - Remote Cookie SQL Injection

CVE-2009-0883—webappsphp

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic_quotes_gpc is disabled, allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

DataLife Engine 4.1 - SQL Injection

CVE-2006-3221—webappsphp

SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

MagNet BeeHive CMS (header) - Remote File Inclusion

CVE-2006-3266—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Apple iTunes 8.1.1.10 (Windows) - 'itms/itcp' Remote Buffer Overflow

CVE-2009-0950—remotewindows

Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.