Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Pre Real Estate Listings - Authentication Bypass

CVE-2008-6796—webappsphp

SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tumbleweed SecureTransport 4.6.1 FileTransfer - ActiveX Buffer Overflow

CVE-2008-1724—remotewindows

Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX cont

50RISCO

abrir ↗

Referência✓ VexDay Proof

Booking Centre 2.01 - 'HotelID' SQL Injection

CVE-2008-6809—webappsphp

SQL injection vulnerability in hotel_habitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Booking Centre 2.01 - Authentication Bypass

CVE-2008-6810—webappsphp

Multiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre Booking System for Hotels Grou

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPwebnews 0.2 MySQL Edition - 'det' SQL Injection

CVE-2008-6812—webappsphp

SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPwebnews 0.2 MySQL Edition - 'id_kat' SQL Injection

CVE-2008-6813—webappsphp

SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.0.1 - Arbitrary File Upload

CVE-2008-6814—webappsphp

Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earl

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blogator-script 0.95 - 'incl_page' Remote File Inclusion

CVE-2008-1760—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Creamotion - 'securite.php' Remote File Inclusion

CVE-2007-5298—webappsphp

Multiple PHP remote file inclusion vulnerabilities in CMS Creamotion allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blogator-script 0.95 - 'id_art' SQL Injection

CVE-2008-1763—webappsphp

SQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dragoon 0.1 - 'root' Remote File Inclusion

CVE-2008-1773—webappsphp

PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arb

28RISCO

abrir ↗

Referência✓ VexDay Proof

V3 Chat Live Support 3.0.4 - Insecure Cookie Handling

CVE-2008-5783—webappsphp

admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative a

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpGreetCards - Cross-Site Scripting / Arbitrary File Upload

CVE-2008-6849—webappsphp

Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pligg CMS 9.9.0 - 'editlink.php' SQL Injection

CVE-2008-1774—webappsphp

SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.6 - 'error_log' Safe_mode Bypass

CVE-2008-5625—localmultiple

PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_f

23RISCO

abrir ↗

Referência✓ VexDay Proof

EQdkp 1.3.0 - 'dbal.php' Remote File Inclusion

CVE-2006-2256—webappsphp

PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZebraFeeds 1.0 - 'zf_path' Remote File Inclusion

CVE-2007-1010—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ZebraFeeds 1.0, when register_globals is enabled, allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPLD 3.3 - Blind SQL Injection

CVE-2008-6851—webappsphp

SQL injection vulnerability in page.php in PHP Link Directory (phpLD) 3.3, when register_globals is enabled and magic_qu

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS NetCat 3.0/3.12 - Blind SQL Injection

CVE-2008-6853—webappsphp

SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Core 2.2 - 'xmlrpc.php' SQL Injection

CVE-2007-3140—webappsphp

SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jasmine CMS 1.0 - SQL Injection / Remote Code Execution

CVE-2007-3312—webappsphp

Directory traversal vulnerability in admin/plugin_manager.php in Jasmine CMS 1.0 allows remote authenticated administrat

23RISCO

abrir ↗

Referência✓ VexDay Proof

Faq Administrator 2.1 - 'faq_reply.php' Remote File Inclusion

CVE-2006-5637—webappsphp

PHP remote file inclusion vulnerability in faq_reply.php in Faq Administrator 2.1b allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Top 100 1.2 - Arbitrary Delete Stats

CVE-2008-1785—webappsphp

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary user

23RISCO

abrir ↗

Referência✓ VexDay Proof

Entertainment Directory 1.1 - SQL Injection

CVE-2008-1788—webappsphp

SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute News Manager 5.1 - Insecure Cookie Handling

CVE-2008-6856—webappsphp

Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative ac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Podcast 1.0 - Remote Insecure Cookie Handling

CVE-2008-6857—webappsphp

Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Restaurante - Arbitrary File Upload

CVE-2007-4817—webappsphp

Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

JBC Explorer 7.20 RC 1 - Remote Code Execution

CVE-2007-5913—webappsphp

dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute NewsLetter 6.1 - Insecure Cookie Handling

CVE-2008-6861—webappsphp

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative

23RISCO

abrir ↗

Referência✓ VexDay Proof

PPStream - 'PowerPlayer.dll 2.0.1.3829' ActiveX Remote Overflow

CVE-2007-4748—remotewindows

Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.