Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities

CVE-2006-5773—webappsphp

Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Creasito E-Commerce Content Manager - 'admin' Authentication Bypass

CVE-2006-5777—webappsphp

Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged funct

23RISCO

abrir ↗

Referência✓ VexDay Proof

iPrimal Forums - '/admin/index.php' Change User Password

CVE-2006-5787—webappsphp

admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwo

23RISCO

abrir ↗

Referência✓ VexDay Proof

iPrimal Forums - '/admin/index.php' Remote File Inclusion

CVE-2006-5788—webappsphp

PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

CVE-2006-5795—webappsphp

Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPAdventure 1.1 - 'ad_main.php' Remote File Inclusion

CVE-2006-5839—webappsphp

PHP remote file inclusion vulnerability in ad_main.php in PHPAdventure 1.1-Alpha and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

DodosMail 2.0.1 - 'dodosmail.php' Remote File Inclusion

CVE-2006-5841—webappsphp

Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Essentia Web Server 2.15 - GET Remote Denial of Service

CVE-2006-5850—doswindows

Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xcode OpenBase 10.0.0 (OSX) - Symlink Privilege Escalation

CVE-2006-5851—localosx

openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/out

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xcode OpenBase 10.0.0 (OSX) - Unsafe System Call Privilege Escalation

CVE-2006-5852—localosx

Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via

23RISCO

abrir ↗

Referência✓ VexDay Proof

J-OWAMP Web Interface 2.1b - 'link' Remote File Inclusion

CVE-2006-6453—webappsphp

PHP remote file inclusion vulnerability in JOWAMP_ShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated

23RISCO

abrir ↗

Referência✓ VexDay Proof

HR Assist 1.05 - 'vdateUsr.asp' Remote Authentication Bypass

CVE-2006-6524—webappsasp

SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

SpotLight CRM 1.0 - 'login.asp' SQL Injection

CVE-2006-6543—webappsasp

Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module ErrorDocs 1.0 - 'common.php' Remote File Inclusion

CVE-2006-6545—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB (mx_er

23RISCO

abrir ↗

Referência✓ VexDay Proof

CuteNews aj-fork 167f - 'cutepath' Remote File Inclusion

CVE-2006-6546—webappsphp

PHP remote file inclusion vulnerability in inc/shows.inc.php in cutenews aj-fork (CN:AJ) 167f and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Phorum 3.2.11 - 'common.php' Remote File Inclusion

CVE-2006-6550—webappsphp

PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module mx_modsdb 1.0 - Remote File Inclusion

CVE-2006-6560—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Po

23RISCO

abrir ↗

Referência✓ VexDay Proof

Newxooper-PHP 0.9.1 - 'mapage.php' Remote File Inclusion

CVE-2006-6711—webappsphp

PHP remote file inclusion vulnerability in compteur/mapage.php in Newxooper 0.9.1 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

PowerClan 1.14a - 'footer.inc.php' Remote File Inclusion

CVE-2006-6715—webappsphp

PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when register_globals is enabl

23RISCO

abrir ↗

Referência✓ VexDay Proof

Uploader & Downloader 3.0 - 'id_user' SQL Injection

CVE-2006-6716—webappsphp

SQL injection vulnerability in administration/administre2.php in Eric GUILLAUME uploader&downloader 3 allows remote atta

23RISCO

abrir ↗

Referência

CVE-2009-4728

CVE-2009-4728—

SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bandwebsite 1.5 - 'LOGIN' Remote Add Admin

CVE-2006-6722—webappsphp

Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative accounts via a direct requ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Irokez Blog 0.7.1 - Multiple Remote File Inclusions

CVE-2006-6771—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when register_globals is enabled, al

23RISCO

abrir ↗

Referência

CVE-2024-24919

CVE-2024-24919HIGHsob ataqueransomware

Information disclosure

100RISCO

abrir ↗

Referência✓ VexDay Proof

SH-News 0.93 - 'misc.php' Remote File Inclusion

CVE-2006-6801—webappsphp

PHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when register_globals is enabled, allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb ePages - 'actualpic.asp' SQL Injection

CVE-2006-6802—webappsasp

SQL injection vulnerability in actualpic.asp in Enthrallweb ePages allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2014-8361

CVE-2014-8361CRITICALsob ataque

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClien

100RISCO

abrir ↗

Referência

CVE-2026-49127

CVE-2026-49127HIGH

Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be

41RISCO

abrir ↗

Referência

CVE-2026-24444

CVE-2026-24444CRITICAL

SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php

48RISCO

abrir ↗

Referência

CVE-2017-2445

CVE-2017-2445—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.