Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.697exploits catalogados
36.715CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.475Referência 23.264GitHub PoC 15.172VulnCheck XDB 8.920Nuclei 4.373Metasploit 3.493✓ só verificadosrecentespopularesrisco
5.629 exploits
Referência✓ VexDay Proof
PStruh-CZ 1.3/1.5 - 'download.asp' File Disclosure
CVE-2007-2486—webappsasp
Directory traversal vulnerability in download.asp in Motobit 1.3 and 1.5 (aka PStruh-CZ) allows remote attackers to read
23RISCO
abrir ↗
Referência✓ VexDay Proof
PHP Links 1.3 - 'smarty.php' Remote File Inclusion
CVE-2008-0566—webappsphp
PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote a
28RISCO
abrir ↗
Referência✓ VexDay Proof
Free PHP VX Guestbook 1.06 - Arbitrary Database Backup
CVE-2008-7006—webappsphp
Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a
23RISCO
abrir ↗
Referência✓ VexDay Proof
CPCommerce 1.1.0 - Cross-Site Scripting / Local File Inclusion
CVE-2008-1907—webappsphp
Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to
23RISCO
abrir ↗
Referência✓ VexDay Proof
ThinkEdit 1.9.2 - 'render.php' Remote File Inclusion
CVE-2006-6426—webappsphp
PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when register_glo
23RISCO
abrir ↗
Referência✓ VexDay Proof
Pie Web M{a_e}sher 0.5.3 - Multiple Remote File Inclusions
CVE-2008-5332—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via
23RISCO
abrir ↗
Referência✓ VexDay Proof
Colloquy 2.1.3545 - 'INVITE' Format String Denial of Service
CVE-2007-0344—dososx
Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier
23RISCO
abrir ↗
Referência✓ VexDay Proof
EZContents CMS 2.0.3 - Multiple Local File Inclusions
CVE-2008-7054—webappsphp
Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary
23RISCO
abrir ↗
Referência✓ VexDay Proof
BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery
CVE-2008-7057—webappsphp
Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbi
23RISCO
abrir ↗
Referência✓ VexDay Proof
LoveCMS 1.6.2 Final (Download Manager 1.0) - Arbitrary File Upload
CVE-2008-7062—webappsphp
Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows
23RISCO
abrir ↗
Referência✓ VexDay Proof
Star Articles 6.0 - Blind SQL Injection (1)
CVE-2008-7075—webappsphp
Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbi
23RISCO
abrir ↗
Referência✓ VexDay Proof
DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)
CVE-2008-1912—doswindows
Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause
28RISCO
abrir ↗
Referência✓ VexDay Proof
Star Articles 6.0 - Arbitrary File Upload
CVE-2008-7076—webappsphp
Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows rem
23RISCO
abrir ↗
Referência✓ VexDay Proof
Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities
CVE-2008-7078—doswindows
Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation f
23RISCO
abrir ↗
Referência✓ VexDay Proof
PHP Classifieds Script - Remote Database Disclosure
CVE-2008-7080—webappsphp
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which
23RISCO
abrir ↗
Referência✓ VexDay Proof
Maian Greetings 2.1 - Insecure Cookie Handling
CVE-2008-7086—webappsphp
Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the m
23RISCO
abrir ↗
Referência✓ VexDay Proof
BigAnt Server 2.2 - Remote Overflow (SEH)
CVE-2008-1914—remotewindows
Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows r
60RISCO
abrir ↗
Referência✓ VexDay Proof
VBA32 Personal AntiVirus 3.12.8.x - Malformed Archive Denial of Service
CVE-2008-5667—doswindows
The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of servi
23RISCO
abrir ↗
Referência✓ VexDay Proof
phpChess Community Edition 2.0 - Multiple Remote File Inclusions
CVE-2007-2677—webappsphp
Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute a
23RISCO
abrir ↗
Referência✓ VexDay Proof
Pligg CMS 9.9.0 - Cross-Site Scripting / Local File Inclusion / SQL Injection
CVE-2008-7091—webappsphp
Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Referência✓ VexDay Proof
LightBlog 9.5 - 'cp_upload_image.php' Arbitrary File Upload
CVE-2008-0632—webappsphp
Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitr
23RISCO
abrir ↗
Referência✓ VexDay Proof
k-rate - SQL Injection / Cross-Site Scripting
CVE-2008-7099—webappsphp
Unspecified vulnerability in the Manage Templates feature in Qsoft K-Rate Premium allows remote attackers to execute arb
23RISCO
abrir ↗
Referência✓ VexDay Proof
Moodle 1.5.2 - 'moodledata' Remote Session Disclosure
CVE-2007-1647—webappsphp
Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides
23RISCO
abrir ↗
Referência✓ VexDay Proof
Microsoft Excel 2000/2003 - Sheet Name (PoC)
CVE-2007-3490—doswindows
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified
35RISCO
abrir ↗
Referência✓ VexDay Proof
Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)
CVE-2008-7103—doswindows
Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attack
23RISCO
abrir ↗
Referência✓ VexDay Proof
phpEventCalendar 0.2.3 - 'eventdisplay.php' SQL Injection
CVE-2007-3519—webappsphp
SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute
23RISCO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Filiale 1.0.4 - 'idFiliale' SQL Injection
CVE-2008-1935—webappsphp
SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗
Referência✓ VexDay Proof
zKup CMS 2.0 < 2.3 - Remote Add Admin
CVE-2008-7124—webappsphp
zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allo
23RISCO
abrir ↗
Referência✓ VexDay Proof
ArcadeBuilder Game Portal Manager 1.7 - SQL Injection
CVE-2007-3521—webappsphp
SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗
Referência✓ VexDay Proof
W1L3D4 philboard 1.0 - 'philboard_reply.asp' SQL Injection
CVE-2008-1939—webappsasp
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
← anteriorpágina 54 / 188próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.