Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

PHPAdventure 1.1 - 'ad_main.php' Remote File Inclusion

CVE-2006-5839—webappsphp

PHP remote file inclusion vulnerability in ad_main.php in PHPAdventure 1.1-Alpha and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

DodosMail 2.0.1 - 'dodosmail.php' Remote File Inclusion

CVE-2006-5841—webappsphp

Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Essentia Web Server 2.15 - GET Remote Denial of Service

CVE-2006-5850—doswindows

Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xcode OpenBase 10.0.0 (OSX) - Symlink Privilege Escalation

CVE-2006-5851—localosx

openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/out

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xcode OpenBase 10.0.0 (OSX) - Unsafe System Call Privilege Escalation

CVE-2006-5852—localosx

Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpleBlog 2.3 - '/admin/edit.asp' SQL Injection

CVE-2006-6191—webappsasp

SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hacks List phpBB Mod 1.21 - SQL Injection

CVE-2006-6216—webappsphp

SQL injection vulnerability in admin_hacks_list.php in the Nivisec Hacks List 1.21 and earlier phpBB module allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Recipes Complete Website 1.1.14 - SQL Injection

CVE-2006-6220—webappsphp

Multiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

GeekLog 1.4.0sr3 - '_CONF[path]' Remote File Inclusion

CVE-2006-6225—webappsphp

Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

S9Y Serendipity 1.0.3 - 'comment.php' Local File Inclusion

CVE-2006-6242—webappsphp

Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include

23RISCO

abrir ↗

Referência✓ VexDay Proof

Songbird Media Player 0.2 - Format String Denial of Service (PoC)

CVE-2006-6250—doswindows

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of servic

23RISCO

abrir ↗

Referência✓ VexDay Proof

VUPlayer 2.44 - '.m3u' UNC Name Buffer Overflow (Metasploit)

CVE-2006-6251—remotewindows

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long st

50RISCO

abrir ↗

Referência✓ VexDay Proof

Quintessential Player 4.50.1.82 - Playlist Denial of Service (PoC)

CVE-2006-6261—doswindows

Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service (cra

23RISCO

abrir ↗

Referência✓ VexDay Proof

CoolPlayer 2.17 - '.m3u' Local Stack Overflow

CVE-2006-6288—localwindows

Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

F-Prot AntiVirus 4.6.6 - CHM Heap Overflow (PoC)

CVE-2006-6293—doslinux

Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to exec

28RISCO

abrir ↗

Referência✓ VexDay Proof

J-OWAMP Web Interface 2.1b - 'link' Remote File Inclusion

CVE-2006-6453—webappsphp

PHP remote file inclusion vulnerability in JOWAMP_ShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated

23RISCO

abrir ↗

Referência✓ VexDay Proof

HR Assist 1.05 - 'vdateUsr.asp' Remote Authentication Bypass

CVE-2006-6524—webappsasp

SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

SpotLight CRM 1.0 - 'login.asp' SQL Injection

CVE-2006-6543—webappsasp

Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module ErrorDocs 1.0 - 'common.php' Remote File Inclusion

CVE-2006-6545—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB (mx_er

23RISCO

abrir ↗

Referência✓ VexDay Proof

CuteNews aj-fork 167f - 'cutepath' Remote File Inclusion

CVE-2006-6546—webappsphp

PHP remote file inclusion vulnerability in inc/shows.inc.php in cutenews aj-fork (CN:AJ) 167f and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Phorum 3.2.11 - 'common.php' Remote File Inclusion

CVE-2006-6550—webappsphp

PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module mx_modsdb 1.0 - Remote File Inclusion

CVE-2006-6560—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Po

23RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module kb_mods 2.0.2 - Remote File Inclusion

CVE-2006-6568—webappsphp

Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allow

23RISCO

abrir ↗

Referência

CVE-2009-4721

CVE-2009-4721—

Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web (A-W) BannerAd 1.0 allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

yaplap 0.6.1b - 'ldap.php' Remote File Inclusion

CVE-2006-6575—webappsphp

PHP remote file inclusion vulnerability in ldap.php in Brian Drawert Yet Another PHP LDAP Admin Project (yaplap) 0.6 and

23RISCO

abrir ↗

Referência

CVE-2006-6576

CVE-2006-6576—

Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (

50RISCO

abrir ↗

Referência✓ VexDay Proof

vBlog / C12 0.1 - 'cfgProgDir' Remote File Inclusion

CVE-2006-6586—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

AR Memberscript - 'usercp_menu.php' Remote File Inclusion

CVE-2006-6590—webappsphp

PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentFlux 2.2 - 'downloaddetails.php' Local File Disclosure

CVE-2006-6604—webappsphp

Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyCMS 0.3 - 'basic.inc.php' Remote File Inclusion

CVE-2006-6612—webappsphp

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.