Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Site@School 2.4.02 - Arbitrary File Upload

CVE-2006-4921—webappsphp15 set 2006

PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Jupiter CMS 1.1.4/1.1.5 - '/modules/search.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-4874—webappsphp15 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Jupiter CMS 1.1.4/1.1.5 - modules/register Multiple SQL Injections

CVE-2006-4876—webappsphp15 set 2006

Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via (1) t

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Jupiter CMS 1.1.4/1.1.5 - '/modules/register.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-4874—webappsphp15 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Jupiter CMS 1.1.4/1.1.5 - '/modules/mass-email.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-4874—webappsphp15 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Jupiter CMS 1.1.4/1.1.5 - 'galleryuploadfunction.php' Arbitrary File Upload

CVE-2006-4875—webappsphp15 set 2006

Unrestricted file upload vulnerability in modules/galleryuploadfunction.php in Jupiter CMS allows remote attackers to up

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpMyAdmin 2.x - 'sql.php?pos' Cross-Site Scripting

CVE-2006-6942—webappsphp15 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpMyAdmin 2.x - 'querywindow.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-6942—webappsphp15 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Symantec (Multiple Products) - 'SymEvent' Driver Local Denial of Service

CVE-2006-4855—doswindows15 set 2006

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Fi

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

phpQuiz 0.1 - 'pagename' Remote File Inclusion

CVE-2006-4834—webappsphp14 set 2006

PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Google Earth 4.0.2091 (Beta) - '.KML'/'.KMZ' Buffer Overflow

CVE-2006-7157—doswindows14 set 2006

Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (cra

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Blojsom 2.31 - Cross-Site Scripting

CVE-2006-4829—webappsphp14 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arb

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DCP-Portal 6.0 - '/admin/inc/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-4838—webappsphp14 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ClickBlog! 2.0 - 'default.asp' SQL Injection

CVE-2006-4857—webappsasp14 set 2006

SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to ex

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DCP-Portal 6.0 - '/admin/inc/footer.inc.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-4838—webappsphp14 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

DCP-Portal 6.0 - 'login.php?Username' SQL Injection

CVE-2006-4836—webappsphp14 set 2006

SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.x - KExtLoad Buffer Overflow

CVE-2006-4866—dososx14 set 2006

Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, a

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Mailman 2.1.x - Multiple Input Validation Vulnerabilities

CVE-2006-3636—webappscgi14 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'download.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ForumJBC 4.0 - 'Haut.php' Cross-Site Scripting

CVE-2006-4771—webappsphp13 set 2006

Cross-site scripting (XSS) vulnerability in haut.php in ForumJBC 4 allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'submitnews.php?PATH_INFO' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'signup.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP Event Calendar 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-4825—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in cl_files/index.php in SoftComplex PHP Event Calendar 1.5.1, and p

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'news.php?PATH_INFO' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows Server 2003 - NetpIsRemote() Remote Overflow (MS06-040) (Metasploit)

CVE-2006-3439—remotewindows13 set 2006

Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote a

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - COM Object Remote Heap Overflow

CVE-2006-4777—remotewindows13 set 2006

Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) fo

60RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'search.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

e107 website system 0.7.5 - 'contact.php?Query String (PATH_INFO)' Cross-Site Scripting

CVE-2006-4794—webappsphp13 set 2006

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Shadowed Portal 5.599 - 'root' Remote File Inclusion

CVE-2006-4885—webappsphp13 set 2006

PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

NX5Linkx 1.0 - 'links.php' HTTP Response Splitting

CVE-2006-4505—webappsphp13 set 2006

CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and co

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.