Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.781exploits catalogados

36.771CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.305GitHub PoC 15.197VulnCheck XDB 8.932Nuclei 4.379Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

DoSePa 1.0.4 - 'textview.php' Information Disclosure

CVE-2006-6028—webappsphp

Directory traversal vulnerability in textview.php in Anton Vlasov DoSePa 1.0.4 allows remote attackers to read arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

AS-GasTracker 1.0.0 - Insecure Cookie Handling

CVE-2008-2269—webappsphp

AustinSmoke GasTracker (AS-GasTracker) 1.0.0 allows remote attackers to bypass authentication and gain privileges by set

23RISCO

abrir ↗

Referência✓ VexDay Proof

VMware 2.5.1 - 'VMware-authd' Remote Denial of Service

CVE-2009-0177—dosmultiple

vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin dmsguestbook 1.7.0 - Multiple Vulnerabilities

CVE-2008-0616—webappsphp

SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote aut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quake 3 Engine Client (Windows x86) - CS_ITEms Remote Overflow

CVE-2006-3401—doswindows_x86

Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause

23RISCO

abrir ↗

Referência✓ VexDay Proof

Activist Mobilization Platform (AMP) 3.2 - Remote File Inclusion

CVE-2007-1571—webappsphp

PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform (AMP) 3.2

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scribe 0.2 - PHP Remote Code Execution

CVE-2007-5822—webappsphp

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - IPv6-ipcomp Remote kernel Denial of Service (PoC)

CVE-2008-0177—dosmultiple

The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check th

28RISCO

abrir ↗

Referência✓ VexDay Proof

Triologic Media Player 7 - '.m3u' Local Heap Buffer Overflow (PoC)

CVE-2009-0262—doswindows

Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.541 - '.mp3'/'.aiff' File Multiple Denial of Service Vulnerabilities

CVE-2009-0263—doswindows

Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly e

28RISCO

abrir ↗

Referência✓ VexDay Proof

Firefly Media Server 0.2.4 - Remote Denial of Service

CVE-2007-5824—doslinux

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

EntertainmentScript 1.4.0 - 'play.php' SQL Injection

CVE-2008-2393—webappsphp

SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Multi-Threaded TFTP 1.1 - GET Denial of Service

CVE-2006-4781—doswindows

Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1 allows remote attackers to cause a denial of

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Walking Club - Authentication Bypass

CVE-2009-0281—webappsasp

SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

TotalCalendar 2.30 - 'inc' Remote File Inclusion

CVE-2006-7055—webappsphp

PHP remote file inclusion vulnerability in index.php in TotalCalendar 2.30 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

MP3 TrackMaker 1.5 - '.mp3' Local Heap Overflow (PoC)

CVE-2009-0175—doswindows

Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

TLS - Renegotiation

CVE-2009-3555CRITICALremotemultiple

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS

70RISCO

abrir ↗

Referência✓ VexDay Proof

BibCiter 1.4 - Multiple SQL Injections

CVE-2009-0324—webappsphp

Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hospital Management System 4.0 - Persistent Cross-Site Scripting

CVE-2020-5191—webappsphp

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities.

38RISCO

abrir ↗

Referência✓ VexDay Proof

HP Digital Imaging 'hpqvwocx.dll 2.1.0.556' - 'SaveToFile()' File Write

CVE-2007-3649—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Dig

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS MAXSITE 1.10 - 'category' SQL Injection

CVE-2008-2487—webappsphp

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

MetaForum 0.513 Beta - Arbitrary File Upload

CVE-2007-1552—webappsphp

Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yahoo! Music Jukebox 2.2 - 'AddImage()' ActiveX Remote Buffer Overflow (PoC)

CVE-2008-0623—doswindows

Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Free Bible Search PHP Script - SQL Injection

CVE-2009-0327—webappsphp

SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

verlihub 0.9.8d-RC2 - Remote Command Execution

CVE-2008-5705—remotelinux

The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlie

23RISCO

abrir ↗

Referência✓ VexDay Proof

JBC Explorer 7.20 RC 1 - Remote Code Execution

CVE-2007-5914—webappsphp

Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

ESPG (Enhanced Simple PHP Gallery) 1.72 - File Disclosure

CVE-2009-0331—webappsphp

Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery (ESPG) 1.72 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

blogit! - SQL Injection / File Disclosure / Cross-Site Scripting

CVE-2009-0334—webappsphp

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quate CMS 0.3.4 - Multiple Vulnerabilities

CVE-2008-2496—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência✓ VexDay Proof

CoreHTTP 0.5.3alpha - HTTPd Remote Buffer Overflow

CVE-2007-4060—remotelinux

Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attack

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.