Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.900exploits catalogados

36.847CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8.946Nuclei 4.390Metasploit 3.501✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

PHP 5.2.3 - PHP_ntuser ntuser_getuserlist() Local Buffer Overflow (PoC)

CVE-2007-4507—doswindows

Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 'FFI' Extension 5.0.5 - 'Safe_mode' Local Bypass

CVE-2007-4528—localwindows

The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode restrictions, which allows context

23RISCO

abrir ↗

Referência✓ VexDay Proof

plxAutoReminder 3.7 - 'id' SQL Injection

CVE-2009-0593—webappsphp

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpskelsite 1.4 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

CVE-2009-0594—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in phpSkelSite 1.4 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

Multiple Vendor - PF Null Pointer Dereference

CVE-2009-0687—dosbsd

The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirO

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aqua CMS - 'Username' SQL Injection

CVE-2009-1317—webappsphp

Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magic_quotes_gpc is disabled, allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zervit Web Server 0.02 - Remote Buffer Overflow (PoC)

CVE-2009-1353—doswindows

Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elecard AVC HD Player - '.XPL' Stack Buffer Overflow (SEH) (PoC)

CVE-2009-1356—doswindows

Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 fi

23RISCO

abrir ↗

Referência✓ VexDay Proof

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

CVE-2009-1612—remotewindows

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote

50RISCO

abrir ↗

Referência✓ VexDay Proof

Teraway LiveHelp 2.0 - Insecure Cookie Handling

CVE-2009-1618—webappsphp

Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&us

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebThings 1.5.2 - 'help.php?module' Local File Inclusion

CVE-2009-2081—webappsphp

Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mundi Mail 0.8.2 - 'top' Remote File Inclusion

CVE-2009-2095—webappsphp

PHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in Mundi Mail 0.8.2, when regi

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyReports 3.0.11 - 'lib_head.php' Remote File Inclusion

CVE-2007-0571—webappsphp

PHP remote file inclusion vulnerability in include/lib/lib_head.php in phpMyReports 3.0.11 and earlier allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Poll 2.0.5-dev - Remote Admin Session Generator

CVE-2007-0845—webappsphp

admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain admin

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open-Realty 2.4.3 - 'last_module' Remote Code Execution

CVE-2007-5056—webappsphp

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including

28RISCO

abrir ↗

Referência✓ VexDay Proof

ClanSphere 2007.4 - 'cat_id' SQL Injection

CVE-2007-5061—webappsphp

SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Connectix Boards 0.7 - 'p_skin' Multiple Vulnerabilities

CVE-2007-1254—webappsphp

SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated user

23RISCO

abrir ↗

Referência✓ VexDay Proof

RicarGBooK 1.2.1 - 'lang' Local File Inclusion

CVE-2007-2050—webappsphp

Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module Calendar (Agenda) 1.5.5 - Remote File Inclusion

CVE-2007-2049—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module (com_calendar) 1.5.5 for Mambo allow remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flip 3.0 - Remote Password Hash Disclosure

CVE-2007-5063—webappsphp

Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, w

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_slideshow - Remote File Inclusion

CVE-2007-5065—webappsphp

PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for Jo

35RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke addon Nuke Mobile Entartainment 1.0 - Local File Inclusion

CVE-2007-5069—webappsphp

Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module eBoard 1.0.7 - GLOBALS[name] Local File Inclusion

CVE-2007-1934—webappsphp

Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Rha7 Downloads 1.0 - 'visit.php' SQL Injection

CVE-2007-1960—webappsphp

SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other

23RISCO

abrir ↗

Referência✓ VexDay Proof

MD-Pro 1.0.76 - SQL Injection

CVE-2007-5222—webappsphp

SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak

CVE-2007-5225—localsolaris

Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the co

23RISCO

abrir ↗

Referência✓ VexDay Proof

PMOS Help Desk 2.4 - Remote Command Execution

CVE-2007-6550—webappsphp

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ossigeno CMS 2.2a3 - 'footer.php' Remote File Inclusion

CVE-2007-5234—webappsphp

PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers t

35RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.2.3 - Remote Code Execution

CVE-2007-1963—webappsphp

SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scout Portal Toolkit 1.4.0 - 'ParentId' SQL Injection

CVE-2005-4195—webappsphp

Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.