Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.697exploits catalogados

36.715CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.264GitHub PoC 15.172VulnCheck XDB 8.920Nuclei 4.373Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

RPG.Board 0.0.8Beta2 - Insecure Cookie Handling

CVE-2008-7028—webappsphp

RPG.Board 0.8 Beta2 and earlier allows remote attackers to bypass authentication and gain privileges by setting the keep

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Shadow Premod 2.7.1 - Remote File Inclusion

CVE-2006-4664—webappsphp

PHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1 and earlier allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

VicFTPS < 5.0 - 'CWD' Remote Buffer Overflow (PoC)

CVE-2007-1014—doswindows

Stack-based buffer overflow in VicFTPS before 5.0 allows remote attackers to cause a denial of service (application cras

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sony Network Camera SNC-P5 1.0 - ActiveX viewer Heap Overflow (PoC)

CVE-2007-3488—doswindows

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5

28RISCO

abrir ↗

Referência✓ VexDay Proof

NewsOffice 1.1 - Remote File Inclusion

CVE-2008-1903—webappsphp

PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enab

35RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 1.5rc - Multiple SQL Injections

CVE-2007-4804—webappsphp

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module My_eGallery 3.04 - 'gid' SQL Injection

CVE-2008-7038—webappsphp

SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

CPCommerce 1.1.0 - Cross-Site Scripting / Local File Inclusion

CVE-2008-1907—webappsphp

Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

ThinkEdit 1.9.2 - 'render.php' Remote File Inclusion

CVE-2006-6426—webappsphp

PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when register_glo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pie Web M{a_e}sher 0.5.3 - Multiple Remote File Inclusions

CVE-2008-5332—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Colloquy 2.1.3545 - 'INVITE' Format String Denial of Service

CVE-2007-0344—dososx

Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

EZContents CMS 2.0.3 - Multiple Local File Inclusions

CVE-2008-7054—webappsphp

Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)

CVE-2008-1912—doswindows

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RISCO

abrir ↗

Referência✓ VexDay Proof

Star Articles 6.0 - Arbitrary File Upload

CVE-2008-7076—webappsphp

Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities

CVE-2008-7078—doswindows

Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation f

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Classifieds Script - Remote Database Disclosure

CVE-2008-7080—webappsphp

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which

23RISCO

abrir ↗

Referência✓ VexDay Proof

Maian Greetings 2.1 - Insecure Cookie Handling

CVE-2008-7086—webappsphp

Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the m

23RISCO

abrir ↗

Referência✓ VexDay Proof

VBA32 Personal AntiVirus 3.12.8.x - Malformed Archive Denial of Service

CVE-2008-5667—doswindows

The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of servi

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpChess Community Edition 2.0 - Multiple Remote File Inclusions

CVE-2007-2677—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pligg CMS 9.9.0 - Cross-Site Scripting / Local File Inclusion / SQL Injection

CVE-2008-7091—webappsphp

Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightBlog 9.5 - 'cp_upload_image.php' Arbitrary File Upload

CVE-2008-0632—webappsphp

Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

k-rate - SQL Injection / Cross-Site Scripting

CVE-2008-7099—webappsphp

Unspecified vulnerability in the Manage Templates feature in Qsoft K-Rate Premium allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Moodle 1.5.2 - 'moodledata' Remote Session Disclosure

CVE-2007-1647—webappsphp

Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Excel 2000/2003 - Sheet Name (PoC)

CVE-2007-3490—doswindows

Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified

35RISCO

abrir ↗

Referência✓ VexDay Proof

Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)

CVE-2008-7103—doswindows

Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpEventCalendar 0.2.3 - 'eventdisplay.php' SQL Injection

CVE-2007-3519—webappsphp

SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Filiale 1.0.4 - 'idFiliale' SQL Injection

CVE-2008-1935—webappsphp

SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

zKup CMS 2.0 < 2.3 - Remote Add Admin

CVE-2008-7124—webappsphp

zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

ArcadeBuilder Game Portal Manager 1.7 - SQL Injection

CVE-2007-3521—webappsphp

SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Grape Statistics 0.2a - 'location' Remote File Inclusion

CVE-2008-1963—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attac

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.