Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.900exploits catalogados

36.847CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8.946Nuclei 4.390Metasploit 3.501✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

phpDatingClub 3.7 - SQL Injection / Cross-Site Scripting Injection

CVE-2009-2179—webappsphp

SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

pc4 Uploader 10.0 - Remote File Disclosure

CVE-2009-2180—webappsphp

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nero ShowTime 5.0.15.0 - '.m3u' Playlist File Remote Buffer Overflow (PoC)

CVE-2008-7079—doswindows

Buffer overflow in Nero ShowTime 5.0.15.0 allows remote attackers to cause a denial of service (crash) and possibly exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

ReVou Twitter Clone - Authentication Bypass

CVE-2008-7083—webappsphp

Multiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

HockeySTATS Online 2.0 - Multiple SQL Injections

CVE-2008-7085—webappsphp

Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

ESET Smart Security 3.0.667.0 - Privilege Escalation (PoC)

CVE-2008-7107—doswindows

easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service (crash) via a crafted IOCTL

23RISCO

abrir ↗

Referência✓ VexDay Proof

iFdate 2.0.3 - SQL Injection

CVE-2008-7114—webappsphp

SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

webid 0.5.4 - Multiple Vulnerabilities

CVE-2008-7116—webappsphp

SQL injection vulnerability in the admin panel (admin/) in WeBid auction script 0.5.4 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Docebo 3.5.0.3 - '/lib.regset.php/non-blind' SQL Injection

CVE-2008-7153—webappsphp

SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earl

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mercury/32 Mail SMTPD - Remote Stack Overrun (PoC)

CVE-2007-4440—doswindows

Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, all

50RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Domino Web Access Upload Module - 'dwa7w.dll' Remote Buffer Overflow

CVE-2007-4474—remotewindows

Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in

50RISCO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox 3.0.5 - Status Bar Obfuscation / Clickjacking

CVE-2009-0253—remotewindows

Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that

23RISCO

abrir ↗

Referência✓ VexDay Proof

plxAutoReminder 3.7 - 'id' SQL Injection

CVE-2009-0593—webappsphp

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpskelsite 1.4 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

CVE-2009-0594—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in phpSkelSite 1.4 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

iPhotoAlbum 1.1 - 'header.php' Remote File Inclusion

CVE-2005-2246—webappsphp

Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code v

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 0.617 - Cross-Site Scripting Remote Cookie Disclosure

CVE-2005-2327—webappsphp

Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aqua CMS - 'Username' SQL Injection

CVE-2009-1317—webappsphp

Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magic_quotes_gpc is disabled, allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zervit Web Server 0.02 - Remote Buffer Overflow (PoC)

CVE-2009-1353—doswindows

Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elecard AVC HD Player - '.XPL' Stack Buffer Overflow (SEH) (PoC)

CVE-2009-1356—doswindows

Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 fi

23RISCO

abrir ↗

Referência✓ VexDay Proof

BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow

CVE-2009-1612—remotewindows

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote

50RISCO

abrir ↗

Referência✓ VexDay Proof

Teraway LiveHelp 2.0 - Insecure Cookie Handling

CVE-2009-1618—webappsphp

Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&us

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebThings 1.5.2 - 'help.php?module' Local File Inclusion

CVE-2009-2081—webappsphp

Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mundi Mail 0.8.2 - 'top' Remote File Inclusion

CVE-2009-2095—webappsphp

PHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in Mundi Mail 0.8.2, when regi

23RISCO

abrir ↗

Referência✓ VexDay Proof

OCS Inventory NG 1.02 - Remote File Disclosure

CVE-2009-2166—webappsphp

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to re

23RISCO

abrir ↗

Referência✓ VexDay Proof

vBulletin Radio and TV Player AddOn - HTML Injection

CVE-2009-2172—webappsphp

Cross-site scripting (XSS) vulnerability in forum/radioandtv.php in the Radio and TV Player addon for vBulletin allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

LushiNews 1.01 - 'comments.php' SQL Injection

CVE-2007-0865—webappsphp

SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Connectix Boards 0.7 - 'p_skin' Multiple Vulnerabilities

CVE-2007-1254—webappsphp

SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated user

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft DNS Server - Dynamic DNS Update/Change

CVE-2007-1644—remotewindows

The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients i

35RISCO

abrir ↗

Referência✓ VexDay Proof

0irc-client 1345 build20060823 - Denial of Service

CVE-2007-1648—doswindows

0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash) by operating an IRC se

23RISCO

abrir ↗

Referência✓ VexDay Proof

RicarGBooK 1.2.1 - 'lang' Local File Inclusion

CVE-2007-2050—webappsphp

Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and exe

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.