Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.858exploits catalogados

36.825CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.346GitHub PoC 15.209VulnCheck XDB 8.944Nuclei 4.383Metasploit 3.501✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

STPHPLibrary - 'STPHPLIB_DIR' Remote File Inclusion

CVE-2007-4737—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hot Links SQL-PHP 3 - 'report.php' Multiple Vulnerabilities

CVE-2008-4379—webappsphp

Cross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

OWLLib 1.0 - 'OWLMemoryProperty.php' Remote File Inclusion

CVE-2006-6150—webappsphp

PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

BrowseDialog Class - 'ccrpbds6.dll' Multiple Denial of Service Vulnerabilities

CVE-2007-1162—doswindows

A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox XSL - Parsing Remote Memory Corruption (PoC) (1)

CVE-2009-1169—dosmultiple

The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows r

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke - 'iframe.php' Remote File Inclusion

CVE-2007-1626—webappsphp

PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Moodle < 1.6.9/1.7.7/1.8.9/1.9.5 - File Disclosure

CVE-2009-1171—webappsphp

The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assist

23RISCO

abrir ↗

Referência✓ VexDay Proof

ftp Admin 0.1.0 - Local File Inclusion / Cross-Site Scripting / Authentication Bypass

CVE-2007-6234—webappsphp

index.php in FTP Admin 0.1.0 allows remote attackers to bypass authentication and obtain administrative access via a log

23RISCO

abrir ↗

Referência✓ VexDay Proof

pPIM 1.0 - Upload/Change Password

CVE-2008-4428—webappsphp

Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Linux Kernel 2.6 (Gentoo / Ubuntu 8.10/9.04) UDEV < 1.4.1 - Local Privilege Escalation (2)

CVE-2009-1185—locallinux

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to ga

60RISCO

abrir ↗

Referência✓ VexDay Proof

SineCMS 2.3.4 - Calendar SQL Injection

CVE-2007-6367—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin Photo album - SQL Injection

CVE-2008-0939—webappsphp

Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow re

23RISCO

abrir ↗

Referência✓ VexDay Proof

PrecisionID Datamatrix - ActiveX Arbitrary File Overwrite

CVE-2009-1212—remotewindows

Multiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX control (DMATRIXLib.Datam

23RISCO

abrir ↗

Referência✓ VexDay Proof

FOSS Gallery Admin 1.0 - Arbitrary File Upload

CVE-2008-4509—webappsphp

Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

FOSS Gallery Public 1.0 - Arbitrary File Upload

CVE-2008-4509—webappsphp

Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'zip-notify' Remote Kernel Overflow (PoC)

CVE-2009-1236—dososx

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Real Estate Scripts 2008 - 'cat' SQL Injection

CVE-2008-4570—webappsphp

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Valdersoft Shopping Cart 3.0 - Remote Command Execution

CVE-2006-0099—webappsphp

PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/temp

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ez Ringtone Manager - Multiple Remote File Disclosure Vulnerabilities

CVE-2008-6112—webappsphp

Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

open NewsLetter 2.5 - Multiple Vulnerabilities (2)

CVE-2006-6786—webappsphp

Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'macfsstat' Local Kernel Memory Leak/Denial of Service

CVE-2009-1237—dososx

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a den

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'Profil' Kernel Memory Leak/Denial of Service (PoC)

CVE-2009-1237—dososx

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a den

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPFootball 1.6 - Remote Database Disclosure

CVE-2007-0638—webappsphp

show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database content

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eserv 3.x - FTP Server (ABOR) Remote Stack Overflow (PoC)

CVE-2008-4588—doswindows

Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a deni

23RISCO

abrir ↗

Referência✓ VexDay Proof

Stash 1.0.3 - SQL Injection User Credentials Disclosure

CVE-2008-4590—webappsphp

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cartweaver 2.16.11 - 'ProdID' SQL Injection

CVE-2006-2046—webappscgi

Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlexCMS Calendar - 'itemID' Blind SQL Injection

CVE-2009-1256—webappsphp

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId para

23RISCO

abrir ↗

Referência✓ VexDay Proof

OPENi-CMS 1.0.1beta - 'config' Remote File Inclusion

CVE-2006-4750—webappsphp

PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

KGB 1.9 - 'sesskglogadmin.php' Local File Inclusion

CVE-2007-0337—webappsphp

Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

CVE-2009-2182—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.