Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

24.451 exploits

Exploit-DB✓ VexDay Proof

KwsPHP 1.0 ConcoursPhoto Module - 'VIEW' Cross-Site Scripting

CVE-2008-1757—webappsphp04 abr 2008

Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers

23RISCO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'show.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISCO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'admin.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISCO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'detail.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISCO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'index.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISCO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'stats.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISCO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'resize.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISCO

Exploit-DB✓ VexDay Proof

mcGallery 1.1 - 'sess.php?lang' Cross-Site Scripting

CVE-2008-6211—webappsphp03 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi

23RISCO

Exploit-DB✓ VexDay Proof

Opera Web Browser 9.26 - Multiple Vulnerabilities

CVE-2008-1762—doslinux03 abr 2008

Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a

23RISCO

Exploit-DB✓ VexDay Proof

Joomla! / Mambo Component Showroom Joomlearn LMS - 'cat' SQL Injection

CVE-2008-4777—webappsphp03 abr 2008

SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attack

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)

CVE-2008-0250—doswindows03 abr 2008

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St

28RISCO

Exploit-DB✓ VexDay Proof

Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery

CVE-2008-6479—webappsphp03 abr 2008

Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallels

23RISCO

Exploit-DB✓ VexDay Proof

Parallels Virtuozzo Containers 3.0.0-25.4/4.0.0-365.6 VZPP Interface File Manger - Cross-Site Request Forgery

CVE-2008-6478—webappsphp03 abr 2008

Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 36

23RISCO

Exploit-DB✓ VexDay Proof

LANDesk Management Suite 8.80.1.1 - PXE TFTP Service Directory Traversal

CVE-2008-6195—remotelinux02 abr 2008

Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and

23RISCO

Exploit-DB✓ VexDay Proof

EasySite 2.0 - 'browser.php' Remote File Inclusion

CVE-2008-6196—webappsphp02 abr 2008

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar

23RISCO

Exploit-DB✓ VexDay Proof

EasySite 2.0 - 'skin_chooser.php' Remote File Inclusion

CVE-2008-6196—webappsphp02 abr 2008

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar

23RISCO

Exploit-DB✓ VexDay Proof

EasySite 2.0 - 'image_editor.php' Remote File Inclusion

CVE-2008-6196—webappsphp02 abr 2008

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar

23RISCO

Exploit-DB✓ VexDay Proof

DivXDB 2002 0.94b - Multiple Cross-Site Scripting Vulnerabilities

CVE-2008-1800—webappsphp02 abr 2008

Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject a

23RISCO

Exploit-DB✓ VexDay Proof

Terracotta - 'index.php' Local File Inclusion

CVE-2008-6522—webappsphp01 abr 2008

Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka Op

23RISCO

Exploit-DB✓ VexDay Proof

Jack (tR) Jax LinkLists 1.00 - 'jax_linklists.php' Cross-Site Scripting

CVE-2008-6562—webappsphp31 mar 2008

Cross-site scripting (XSS) vulnerability in jax_linklists.php in Jack (tR) Jax LinkLists 1.00 allows remote attackers to

23RISCO

Exploit-DB✓ VexDay Proof

Jax Guestbook 3.31/3.50 - 'jax_Guestbook.php' Cross-Site Scripting

CVE-2005-4879—webappsphp31 mar 2008

Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote atta

23RISCO

Exploit-DB✓ VexDay Proof

@lex Guestbook 4.0.5 - 'setup.php?language_setup' Cross-Site Scripting

CVE-2008-7140—webappsphp31 mar 2008

Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject

23RISCO

Exploit-DB✓ VexDay Proof

@lex Poll 1.2 - 'setup.php' Cross-Site Scripting

CVE-2008-7141—webappsphp31 mar 2008

Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web s

23RISCO

Exploit-DB✓ VexDay Proof

@lex Guestbook 4.0.5 - 'index.php?test' Cross-Site Scripting

CVE-2008-7140—webappsphp31 mar 2008

Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject

23RISCO

Exploit-DB✓ VexDay Proof

SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service / Memory Corruption Vulnerabilities

CVE-2008-1690—doswindows31 mar 2008

WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of se

23RISCO

Exploit-DB✓ VexDay Proof

PHPGKit 0.9 - 'connexion.php' Remote File Inclusion

CVE-2008-6491—webappsphp31 mar 2008

PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers to execute arbitrary PHP

23RISCO

Exploit-DB✓ VexDay Proof

EfesTECH Video 5.0 - 'catID' SQL Injection

CVE-2008-1641—webappsasp31 mar 2008

SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Office XP SP3 - '.PPT' File Buffer Overflow (MS08-016)

CVE-2008-0113—localwindows30 mar 2008

Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execu

35RISCO

Exploit-DB✓ VexDay Proof

Microsoft Office XP SP3 - '.PPT' File Buffer Overflow (MS08-016)

CVE-2008-0118—localwindows30 mar 2008

Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 f

35RISCO

Exploit-DB✓ VexDay Proof

2X ThinClientServer 5.0 sp1-r3497 TFTP Service - Directory Traversal

CVE-2008-1620—remotewindows29 mar 2008

Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r349

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.