Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

24.455 exploits

Exploit-DB✓ VexDay Proof

Bookmark4U 2.0 - '/inc/dbase.php?env[include_prefix]' Remote File Inclusion

CVE-2006-2877—webappsphp05 jun 2006

PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CyBoards PHP Lite 1.21/1.25 - 'Common.php' Remote File Inclusion

CVE-2006-2871—webappsphp05 jun 2006

PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execu

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

ESTsoft InternetDisk - Arbitrary File Upload / Script Execution

CVE-2006-2899—webappsphp05 jun 2006

Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execut

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Dmx Forum 2.1a - 'edit.php' Remote Password Disclosure

CVE-2006-2946—webappsphp05 jun 2006

Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attacker

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Particle Wiki 1.0.2 - SQL Injection

CVE-2006-2861—webappsphp05 jun 2006

SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Kmita FAQ 1.0 - 'index.php?catid' SQL Injection

CVE-2006-2884—webappsphp05 jun 2006

SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bookmark4U 2.0 - '/inc/function.php?env[include_prefix]' Remote File Inclusion

CVE-2006-2877—webappsphp05 jun 2006

PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bookmark4U 2.0 - '/inc/config.php?env[include_prefix]' Remote File Inclusion

CVE-2006-2877—webappsphp05 jun 2006

PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel < 2.6.16.18 - Netfilter NAT SNMP Module Remote Denial of Service

CVE-2006-2444—doslinux05 jun 2006

The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Dmx Forum 2.1a - 'edit.php' Remote Password Disclosure

CVE-2006-2947—webappsphp05 jun 2006

Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 5.0.1 - Frameset Memory Corruption

CVE-2006-3637—doswindows05 jun 2006

Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which al

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

myNewsletter 1.1.2 - 'Username' SQL Injection

CVE-2006-2887—webappsphp05 jun 2006

Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CoolForum 0.x - 'editpost.php' SQL Injection

CVE-2006-2867—webappsphp05 jun 2006

SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Kmita FAQ 1.0 - 'search.php?q' Cross-Site Scripting

CVE-2006-2883—webappsphp05 jun 2006

Cross-site scripting (XSS) vulnerability in search.php in Kmita FAQ 1.0 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Bookmark4U 2.0 - '/inc/common.php?env[include_prefix]' Remote File Inclusion

CVE-2006-2877—webappsphp05 jun 2006

PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

dotWidget CMS 1.0.6 - 'file_path' Remote File Inclusion

CVE-2006-2852—webappsphp05 jun 2006

PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows rem

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Quake 3 Engine - 'CL_ParseDownload' Remote Buffer Overflow

CVE-2006-2875—dosmultiple05 jun 2006

Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple pr

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

XUEBook 1.0 - 'index.php' SQL Injection

CVE-2006-2855—webappsphp03 jun 2006

SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

LifeType 1.0.4 - SQL Injection

CVE-2006-2857—webappsphp03 jun 2006

SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

PixelPost 1-5rc1-2 - Privilege Escalation

CVE-2006-2889—webappsphp03 jun 2006

Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

IBWd Guestbook 1.0 - 'index.php' SQL Injection

CVE-2006-2854—webappsphp03 jun 2006

SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

dotWidget for articles 2.0 - '/admin/editconfig.php' Multiple Remote File Inclusions

CVE-2006-7052—webappsphp03 jun 2006