Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.151exploits catalogados
35.370CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (2)
CVE-2008-3957—remotewindows08 set 2008
The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrar
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (1)
CVE-2008-3957—remotewindows08 set 2008
The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrar
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eXtrovert software Thyme 1.3 - 'pick_users.php' SQL Injection
CVE-2008-4459—webappsphp08 set 2008
SQL injection vulnerability in pick_users.php in the groups module in eXtrovert Thyme 1.3 allows remote attackers to exe
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
D-Link DIR-100 1.12 - Security Bypass
CVE-2008-4133—remotehardware08 set 2008
The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with la
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Organization Chart 2 - Remote Code Execution
CVE-2008-3956—remotewindows08 set 2008
orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (applicati
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Core 2.6.1 - SQL Column Truncation
CVE-2009-2762—webappsphp07 set 2008
wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
E-PHP B2B Trading Marketplace Script - 'listings.php' SQL Injection
CVE-2008-4458—webappsphp07 set 2008
SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpAdultSite CMS - 'results_per_page' Cross-Site Scripting
CVE-2008-6979—webappsphp07 set 2008
Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Silentum LoginSys 1.0 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-6764—webappsphp06 set 2008
Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WebCMS Portal Edition - 'id' Blind SQL Injection
CVE-2008-4186—webappsphp05 set 2008
SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
EsFaq 2.0 - 'idcat' SQL Injection
CVE-2008-6016—webappsphp05 set 2008
SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XRms 1.99.2 - 'starting' Cross-Site Scripting
CVE-2008-3664—webappsphp04 set 2008
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XRms 1.99.2 - 'case_title' Cross-Site Scripting
CVE-2008-3664—webappsphp04 set 2008
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XRms 1.99.2 - 'campaign_title' Cross-Site Scripting
CVE-2008-3664—webappsphp04 set 2008
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XRms 1.99.2 - 'opportunity_title' Cross-Site Scripting
CVE-2008-3664—webappsphp04 set 2008
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XRms 1.99.2 - 'login.php?target' Cross-Site Scripting
CVE-2008-3664—webappsphp04 set 2008
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XRms 1.99.2 - 'title' Cross-Site Scripting
CVE-2008-3664—webappsphp04 set 2008
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗
Exploit-DB
Zen Cart < 1.3.8a - SQL Injection
CVE-2008-6985—webappslinux04 set 2008
Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XRms 1.99.2 - 'company_name' Cross-Site Scripting
CVE-2008-3664—webappsphp04 set 2008
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XRms 1.99.2 - 'file_id' Cross-Site Scripting
CVE-2008-3664—webappsphp04 set 2008
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
XRms 1.99.2 - 'last_name' Cross-Site Scripting
CVE-2008-3664—webappsphp04 set 2008
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
eliteCMS 1.0 - 'page' SQL Injection
CVE-2008-4046—webappsphp03 set 2008
SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
CeleronDude Uploader 6.1 - 'account.php' Cross-Site Scripting
CVE-2008-6396—webappsphp03 set 2008
Cross-site scripting (XSS) vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject ar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 7.3.1 - 'Forum[]' Array SQL Injection
CVE-2008-6970—webappsphp02 set 2008
SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbi
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Softalk Mail Server 8.5.1 - 'APPEND' Remote Denial of Service
CVE-2008-4041—dosmultiple02 set 2008
The IMAP server in Softalk Mail Server (formerly WorkgroupMail) 8.5.1.431 allows remote authenticated users to cause a d
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting
CVE-2008-3941—webappsphp02 set 2008
Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary we
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Chrome 0.2.149 - Malformed 'title' Tag Remote Denial of Service
CVE-2008-7061—dosmultiple02 set 2008
The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
vTiger CRM 5.0.4 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-3101—webappsphp01 set 2008
Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Full PHP Emlak Script - 'landsee.php' SQL Injection
CVE-2008-3942—webappsphp29 ago 2008
SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenDB 1.0.6 - 'user_profile.php?redirect_url' Cross-Site Scripting
CVE-2008-3937MEDIUMwebappsphp28 ago 2008
Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attack
33RISCO
abrir ↗
← anteriorpágina 471 / 816próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.