Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.781exploits catalogados

36.771CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.305GitHub PoC 15.197VulnCheck XDB 8.932Nuclei 4.379Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

WeBid 0.5.4 - 'item.php' SQL Injection

CVE-2008-7119—webappsphp

SQL injection vulnerability in item.php in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

W1L3D4 philboard 1.0 - 'philboard_reply.asp' SQL Injection

CVE-2008-1939—webappsasp

Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZZ FlashChat 3.1 - 'help.php' Local File Inclusion

CVE-2007-5620—webappsphp

Directory traversal vulnerability in admin/inc/help.php in ZZ:FlashChat 3.1 and earlier allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

QNX Neutrino 0.8.4 Atomic Edition - Remote Code Execution

CVE-2008-3150—webappsphp

Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modi

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightNEasy 1.2 - no database Remote Hash Retrieve

CVE-2008-6537—webappsphp

LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the admini

23RISCO

abrir ↗

Referência✓ VexDay Proof

phosheezy 2.0 - Remote Command Execution

CVE-2009-0250—webappsphp

Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

b1gbb 2.24.0 - SQL Injection / Cross-Site Scripting

CVE-2007-3589—webappsphp

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

E RESERV 2.1 - 'index.php' SQL Injection

CVE-2008-1975—webappsphp

SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche FreeForum - Database Disclosure

CVE-2008-5932—webappsasp

CodeAvalanche FreeForum stores sensitive information under the web root with insufficient access control, which allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

OraMon 2.0.1 - Remote Configuration File Disclosure

CVE-2008-6869—webappsphp

Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access co

23RISCO

abrir ↗

Referência✓ VexDay Proof

EkinBoard 1.1.0 - Arbitrary File Upload / Authentication Bypass

CVE-2008-7157—webappsphp

Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pinnacle Studio 12 - '.hfz' Directory Traversal

CVE-2009-1743—localwindows

Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Syst

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

CVE-2008-1991—webappsphp

Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component jabode - 'id' SQL Injection

CVE-2008-7169—webappsphp

SQL injection vulnerability in Jabode horoscope extension (com_jabode) for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Facil-CMS 0.1RC - Multiple Local File Inclusions

CVE-2008-7176—webappsphp

Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

DBImageGallery 1.2.2 - 'donsimg_base_path' Remote File Inclusion

CVE-2007-1164—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DBImageGallery 1.2.2 allow remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

MagicISO 5.4 (build239) - '.cue' Heap Overflow (PoC)

CVE-2007-2761—doslinux

Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

ModuleBuilder 1.0 - 'file' Remote File Disclosure

CVE-2007-5812—webappsphp

Directory traversal vulnerability in modules/Builder/DownloadModule.php in ModuleBuilder 1.0 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agares phpAutoVideo 2.21 - Local/Remote File Inclusion

CVE-2007-6614—webappsphp

PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

WonderWare SuiteLink 2.0 - Remote Denial of Service (Metasploit)

CVE-2008-2005—doswindows

The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, a

28RISCO

abrir ↗

Referência✓ VexDay Proof

OTManager CMS 2.4 - Insecure Cookie Handling

CVE-2008-7179—webappsphp

OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMI

23RISCO

abrir ↗

Referência✓ VexDay Proof

Half-Life CSTRIKE Server 1.6 - 'no-steam' Denial of Service

CVE-2008-7203—dosmultiple

Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple cr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion

CVE-2007-1992—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the com_zoom 2.5 beta 2 and earlier module for Mambo allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mcms Easy Web Make - 'index.php?template' Local File Inclusion

CVE-2007-6344—webappsphp

Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to include

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joovili 3.1 - 'browse.videos.php' SQL Injection

CVE-2008-2063—webappsphp

SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dokeos E-Learning System 1.8.5 - Local File Inclusion

CVE-2008-3363—webappsphp

Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPUserBase 1.3b - 'unverified.inc.php' Local File Inclusion

CVE-2008-7240—webappsphp

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jokes Site Script - 'jokes.php' SQL Injection

CVE-2008-2065—webappsphp

SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

EO Video 1.36 - Local Heap Overflow Denial of Service / (PoC)

CVE-2008-3733—doswindows

Stack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial of service (applicatio

23RISCO

abrir ↗

Referência✓ VexDay Proof

RTS Sentry Digital Surveillance - 'CamPanel.dll 2.1.0.2' Remote Buffer Overflow

CVE-2008-4548—remotewindows

Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control (CamPanel.dll) in RTS Sentry 2.1.0.2 allows remote at

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.