Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.117exploits catalogados

39.594CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.613Exploit-DB 24.485GitHub PoC 16.328VulnCheck XDB 9.678Nuclei 4.488Metasploit 3.525✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

fungamez rc1 - Authentication Bypass / Local File Inclusion

CVE-2009-1488—webappsphp

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

dotProject 2.0.4 - 'baseDir' Remote File Inclusion

CVE-2006-4234—webappsphp

PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

CuteNews 1.1.1 - 'html.php' Remote Code Execution

CVE-2008-4557—webappsphp

plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute

35RISCO

abrir ↗

Referência✓ VexDay Proof

Pluck CMS 4.6.1 - 'module_pages_site.php' Local File Inclusion

CVE-2008-6842—webappsphp

Directory traversal vulnerability in data/modules/blog/module_pages_site.php in Pluck 4.6.1 allows remote attackers to i

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPSlash 0.8.1.1 - Remote Code Execution

CVE-2009-0517—webappsphp

Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary P

35RISCO

abrir ↗

Referência✓ VexDay Proof

fungamez rc1 - Authentication Bypass / Local File Inclusion

CVE-2009-1489—webappsphp

includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by set

23RISCO

abrir ↗

Referência✓ VexDay Proof

VIDEOSCRIPT.us - Authentication Bypass

CVE-2009-1804—webappsphp

Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

IRSR 0.2 - '_sysSessionPath' Remote File Inclusion

CVE-2006-4237—webappsphp

PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component mambelfish 1.1 - Remote File Inclusion

CVE-2006-4270—webappsphp

PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com_mambelfish) 1.1 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

TikiWiki 1.9.8 - Remote PHP Injection

CVE-2007-5423—webappsphp

tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f ar

60RISCO

abrir ↗

Referência✓ VexDay Proof

StormBoard 1.0.1 - SQL Injection

CVE-2008-5726—webappsphp

SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS NetCat 3.12 - Multiple Vulnerabilities

CVE-2008-5730—webappsphp

Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impact

23RISCO

abrir ↗

Referência✓ VexDay Proof

Calendar Script 1.1 - Authentication Bypass

CVE-2008-5737—webappsphp

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

my-colex 1.4.2 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1810—webappsphp

Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1)

23RISCO

abrir ↗

Referência✓ VexDay Proof

PromoteWeb MySQL - 'id' SQL Injection

CVE-2008-5069—webappsphp

SQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magic_quotes_gpc is disabled, allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tutti Nova 1.6 - 'TNLIB_DIR' Remote File Inclusion

CVE-2006-4276—webappsphp

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

SportsPHool 1.0 - 'mainnav' Remote File Inclusion

CVE-2006-4278—webappsphp

PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreePBX 2.1.3 - 'upgrade.php' Remote File Inclusion

CVE-2006-7107—webappsphp

PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

LBlog 1.05 - 'comments.asp' SQL Injection

CVE-2006-4284—webappsasp

SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

MDPro 1.0.76 - 'Cookie PNSVlang' Local File Inclusion

CVE-2006-7112—webappsphp

Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Text-File Login script (SiTeFiLo) 1.0.6 - File Disclosure / Remote File Inclusion

CVE-2008-5762—webappsphp

Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Text-File Login script (SiTeFiLo) 1.0.6 - File Disclosure / Remote File Inclusion

CVE-2008-5763—webappsphp

PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows r

35RISCO

abrir ↗

Referência✓ VexDay Proof

Gnews Publisher .NET - SQL Injection

CVE-2008-5767—webappsasp

SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 1.0.154.53 - Null Pointer Remote Crash

CVE-2009-1514—doswindows

Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fantastic News 2.1.3 - 'script_path' Remote File Inclusion

CVE-2006-4285—webappsphp

PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Feederator 1.0.5 - Multiple Remote File Inclusions

CVE-2008-5789—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5

35RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service

CVE-2006-4301—doswindows

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attrib

35RISCO

abrir ↗

Referência✓ VexDay Proof

OpenSSL < 0.9.7l/0.9.8d - SSLv2 Client Crash

CVE-2006-4343—dosmultiple

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier

28RISCO

abrir ↗

Referência✓ VexDay Proof

webClassifieds 2005 - Authentication Bypass

CVE-2008-5817—webappsphp

Multiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-Shop Shopping Cart Script - 'search_results.php' SQL Injection

CVE-2008-5838—webappsphp

SQL injection vulnerability in search_results.php in E-Php Scripts E-Shop (aka E-Php Shopping Cart) Shopping Cart Script

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.