Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Berylium2 2003-08-18 - 'beryliumroot' Remote File Inclusion

CVE-2007-2531—webappsphp

PHP remote file inclusion vulnerability in berylium-classes.php in Berylium2 2003-08-18 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACGVAnnu 1.3 - 'acgv.php?rubrik' Local File Inclusion

CVE-2007-2560—webappsphp

Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPtree 1.3 - 'cms2.php?s_dir' Remote File Inclusion

CVE-2007-2573—webappsphp

PHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Archangel Weblog 0.90.02 - Local File Inclusion / Authentication Bypass

CVE-2007-2574—webappsphp

Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary fil

23RISCO

abrir ↗

Referência✓ VexDay Proof

telltarget 1.3.3 - 'tt_docroot' Remote File Inclusion

CVE-2007-2597—webappsphp

Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary P

28RISCO

abrir ↗

Referência✓ VexDay Proof

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

CVE-2008-1990—webappsphp

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Local Classifieds - Cross-Site Scripting / SQL Injection

CVE-2008-6350—webappsphp

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Local Classifieds - Cross-Site Scripting / SQL Injection

CVE-2008-6351—webappsphp

Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to in

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xpoze 4.10 - 'menu' Blind SQL Injection

CVE-2008-6352—webappsphp

SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Watchfire Appscan 7.0 - ActiveX Multiple Insecure Methods

CVE-2008-2015—remotewindows

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting

CVE-2008-2023—webappsasp

Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure

CVE-2008-2024—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when register_globals is enab

23RISCO

abrir ↗

Referência✓ VexDay Proof

@lex Guestbook 4.0.2 - Remote Command Execution

CVE-2007-0205—webappsphp

Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to cre

23RISCO

abrir ↗

Referência✓ VexDay Proof

vp-asp shopping cart 6.09 - SQL Injection / Cross-Site Scripting

CVE-2007-0224—webappsasp

SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

FOG Forum 0.8.1 - Multiple Local File Inclusions

CVE-2008-2993—webappsphp

Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure

CVE-2008-2029—webappsphp

Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earli

23RISCO

abrir ↗

Referência✓ VexDay Proof

Angelo-Emlak 1.0 - Multiple SQL Injections

CVE-2008-2047—webappsasp

Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 FAQ Manager Pro - 'ID' Blind SQL Injection

CVE-2008-6372—webappsphp

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Groupwise 7.0 - 'mailto: scheme' Buffer Overflow (PoC)

CVE-2008-2069—doswindows

Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via

35RISCO

abrir ↗

Referência✓ VexDay Proof

Gallery MX 2.0.0 - Blind SQL Injection

CVE-2008-6379—webappsasp

SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (2)

CVE-2007-0388—webappsphp

SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpleNews 1.0.0 FINAL - 'print.php?news_id' SQL Injection

CVE-2007-2598—webappsphp

SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.00 - 'search.php?search' SQL Injection

CVE-2007-2599—webappsphp

Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.00 - 'search.php?search' SQL Injection

CVE-2007-2600—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

LaVague 0.3 - 'printbar.php?views_path' Remote File Inclusion

CVE-2007-2607—webappsphp

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers t

45RISCO

abrir ↗

Referência✓ VexDay Proof

Vlbook 1.21 - Cross-Site Scripting / Local File Inclusion

CVE-2008-2072—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to in

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vlbook 1.21 - Cross-Site Scripting / Local File Inclusion

CVE-2008-2073—webappsphp

Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pivot 1.40.5 - Dreamwind 'load_template()' Credentials Disclosure

CVE-2008-3128—webappsphp

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rae Media Contact MS - Authentication Bypass

CVE-2008-6389—webappsphp

SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterpri

23RISCO

abrir ↗

Referência✓ VexDay Proof

Siteman 2.x - Code Execution / Local File Inclusion / Cross-Site Scripting

CVE-2008-2081—webappsphp

Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.