Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados
35.420CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
Simple Machines Forum (SMF) 1.1.4 - Multiple Remote File Inclusions
CVE-2008-6544—webappsphp28 mar 2008
Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execut
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wireshark 0.99.8 - SCCP Dissector Decode As Feature Denial of Service
CVE-2008-1563—doslinux28 mar 2008
The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 a
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wireshark 0.99.8 - X.509sat Dissector Denial of Service
CVE-2008-1561—doslinux28 mar 2008
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to ca
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wireshark 0.99.8 - LDAP Dissector Denial of Service
CVE-2008-1562—doslinux28 mar 2008
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of s
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
MySQL 6.0.4 - Empty Binary String Literal Remote Denial of Service
CVE-2008-3963—doslinux28 mar 2008
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-q
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BSD (Multiple Distributions) - 'strfmon()' Integer Overflow
CVE-2008-1391—dosbsd27 mar 2008
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DigiDomain 2.2 - 'lookup_result.asp?domain' Cross-Site Scripting
CVE-2008-1560—webappsasp27 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
DigiDomain 2.2 - 'suggest_result.asp' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-1560—webappsasp27 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrar
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GeeCarts - 'show.php?id' Cross-Site Scripting
CVE-2008-1621—webappsphp26 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Invision Power Board 2.x - 'Signature' iFrame Security
CVE-2008-6565—webappsphp26 mar 2008
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GeeCarts - 'search.php?id' Cross-Site Scripting
CVE-2008-1621—webappsphp26 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BlackBoard Academic Suite 6/7 - '/bin/common/announcement.pl?data__announcements___pk1_pk2__subject' Cross-Site Scripting
CVE-2008-1795—webappscgi26 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
BlackBoard Academic Suite 6/7 - '/webapps/BlackBoard/execute/viewCatalog?searchText' Cross-Site Scripting
CVE-2008-1795—webappscgi26 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPAddressBook 2.0 - 'index.php' SQL Injection
CVE-2008-7145—webappsphp26 mar 2008
Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
PECL 3.0.x - Alternative PHP Cache Extension 'apc_search_paths()' Remote Buffer Overflow
CVE-2008-1488—remotelinux26 mar 2008
Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to exe
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
GeeCarts - 'view.php?id' Cross-Site Scripting
CVE-2008-1621—webappsphp26 mar 2008
Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
JAF CMS 4.0 RC2 - Multiple Remote File Inclusions
CVE-2006-7128—webappsphp26 mar 2008
PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell eDirectory 8.x - eMBox Utility 'edirutil' Command
CVE-2008-0926—remotenovell25 mar 2008
The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on clien
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
phpBB PJIRC Module 0.5 - 'irc.php' Local File Inclusion
CVE-2008-1565—webappsphp25 mar 2008
Directory traversal vulnerability in forum/irc/irc.php in the PJIRC 0.5 module for phpBB allows remote attackers to incl
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
LeadTools MultiMedia 15 - 'LTMM15.dll' ActiveX Control Arbitrary File Overwrite
CVE-2008-1605—remotewindows25 mar 2008
The (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class, and (3) ltmmPlayCtrl Class ActiveX controls (ltmm15.dll 15.1.0
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Bomba Haber 2.0 - 'haberoku.php' SQL Injection
CVE-2008-1607—webappsphp25 mar 2008
SQL injection vulnerability in haberoku.php in Serbay Arslanhan Bomba Haber 2.0 allows remote attackers to execute arbit
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'Classifieds/index.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'Classifieds/view.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlpannel/alterFeatured.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlpannel/createHomepage.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlpannel/createdb.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'style/default.scheme.inc?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlcenter/index.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'include/adminHead.inc?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlcenter/sign-up.php3?DOCUMENT_ROOT' Remote File Inclusion
CVE-2008-6543—webappsphp24 mar 2008
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RISCO
abrir ↗
← anteriorpágina 491 / 816próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.