Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência✓ VexDay Proof

gf-3xplorer 2.4 - Cross-Site Scripting / Local File Inclusion

CVE-2007-6475—webappsphp

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joovili 3.0.6 - 'joovili.images.php' Remote File Disclosure

CVE-2007-6621—webappsphp

Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read a

23RISCO

abrir ↗

Referência✓ VexDay Proof

VHD Web Pack 2.0 - 'index.php' Local File Inclusion

CVE-2008-0609—webappsphp

Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightBlog 9.6 - 'Username' Local File Inclusion

CVE-2008-0840—webappsphp

Directory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to includ

23RISCO

abrir ↗

Referência✓ VexDay Proof

GNU/Gallery 1.1.1.0 - 'admin.php' Local File Inclusion

CVE-2008-2353—webappsphp

Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting

CVE-2008-2963—webappsphp

Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

ResearchGuide 0.5 - 'id' SQL Injection

CVE-2008-2964—webappsphp

SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

jaxultrabb 2.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2965—webappsphp

Cross-site scripting (XSS) vulnerability in viewforum.php in JaxUltraBB (JUBB) 2.0 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP KnowledgeBase Script 2.4 - 'cat_id' SQL Injection

CVE-2008-2972—webappsphp

SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the ca

23RISCO

abrir ↗

Referência✓ VexDay Proof

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

CVE-2008-5072—doswindows

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash)

23RISCO

abrir ↗

Referência

CVE-2022-29296

CVE-2022-29296—

A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attack

23RISCO

abrir ↗

Referência

CVE-2022-29296

CVE-2022-29296—

A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attack

23RISCO

abrir ↗

Referência

CVE-2022-24223

CVE-2022-24223—

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.

50RISCO

abrir ↗

Referência

CVE-2018-0966

CVE-2018-0966—

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security F

23RISCO

abrir ↗

Referência✓ VexDay Proof

Lithium CMS 4.04c - '/classes/index.php' Local File Inclusion

CVE-2006-5731—webappsphp

Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ourspace 2.0.9 - 'uploadmedia.cgi' Arbitrary File Upload

CVE-2007-4647—webappscgi

newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via uns

23RISCO

abrir ↗

Referência

CVE-2021-24664

CVE-2021-24664—

WPSchoolPress < 2.1.17 - Multiple Admin+ Stored Cross-Site Scripting

23RISCO

abrir ↗

Referência✓ VexDay Proof

mBlog 1.2 - 'page' Remote File Disclosure

CVE-2007-6582—webappsphp

Directory traversal vulnerability in index.php in mBlog 1.2 allows remote attackers to read arbitrary files via a .. (do

23RISCO

abrir ↗

Referência✓ VexDay Proof

celerbb 0.0.2 - Multiple Vulnerabilities

CVE-2009-0853—webappsphp

23RISCO

abrir ↗

Referência✓ VexDay Proof

artmedic weblog 1.0 - Multiple Local File Inclusions

CVE-2008-0798—webappsphp

Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow

23RISCO

abrir ↗

Referência

CVE-2014-7153

CVE-2014-7153—

SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1.

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinXCMS 1.1 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2975—webappsphp

Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

HomePH Design 2.10 RC2 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

CVE-2008-2982—webappsphp

Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register_globals is enabled, allow remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Demo4 CMS - 'id' SQL Injection

CVE-2008-2983—webappsphp

SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2012-6043

CVE-2012-6043—

Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

moziloCMS 1.10.1 - 'download.php' Arbitrary Download File

CVE-2008-3589—webappsphp

Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyCMS 1.1.2 - 'templater.php' Local File Inclusion

CVE-2008-4740—webappsphp

Directory traversal vulnerability in templater.php in the ZZ_Templater module in TinyCMS 1.1.2, when register_globals is

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyKtools 2.4 - 'langage' Local File Inclusion

CVE-2008-4781—webappsphp

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

MemHT Portal 4.0.1 - SQL Injection / Code Execution

CVE-2008-5132—webappsphp

SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2010-1043

CVE-2010-1043—

Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.