Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.900exploits catalogados

36.847CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8.946Nuclei 4.390Metasploit 3.501✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

e107 Plugin BLOG Engine 2.2 - 'rid' Blind SQL Injection

CVE-2008-2455—webappsphp

SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

MolyX BOARD 2.5.0 - 'index.php?lang' Local File Inclusion

CVE-2007-2778—webappsphp

Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .

23RISCO

abrir ↗

Referência✓ VexDay Proof

DB Top Sites 1.0 - Remote Command Execution

CVE-2009-2111—webappsphp

Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

EnjoySAP ActiveX kweditcontrol.kwedit.1 - Remote Stack Overflow (PoC)

CVE-2007-3607—doswindows

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denia

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBill 20061010 - 'menu_builder.php' File Inclusion

CVE-2006-5620—webappsphp

PHP remote file inclusion vulnerability in include/menu_builder.php in MiniBILL 2006-10-10 (1.2.3) and earlier, when reg

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Upload Center 2.0 - 'activate.php' File Inclusion

CVE-2006-6360—webappsphp

PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Furkan Tastan Blog - SQL Injection

CVE-2007-5272—webappsasp

SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Orbit Downloader 2.8.7 - Arbitrary File Deletion

CVE-2009-1064—remotewindows

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashChat 4.5.7 - 'aedating4CMS.php' Remote File Inclusion

CVE-2006-4583—webappsphp

Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

R2K Gallery 1.7 - 'galeria.php?lang2' Local File Inclusion

CVE-2007-2642—webappsphp

Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via

23RISCO

abrir ↗

Referência✓ VexDay Proof

MX-System 2.7.3 - 'index.php' SQL Injection

CVE-2008-2477—webappsphp

SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

snap - seccomp BBlacklist for TIOCSTI can be Circumvented

CVE-2019-7303MEDIUMdoslinux

Snapd seccomp filter TIOCSTI ioctl bypass

33RISCO

abrir ↗

Referência✓ VexDay Proof

2WIRE Modems/Routers - 'CRLF' Denial of Service

CVE-2006-4523—doshardware

The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

TCExam 4.0.011 - 'SessionUserLang' Shell Injection

CVE-2007-2430—webappsphp

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by

23RISCO

abrir ↗

Referência✓ VexDay Proof

eIQnetworks ESA SEARCHREPORT - Remote Overflow (Metasploit)

CVE-2007-5699—remotewindows

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

PolDoc CMS 0.96 - 'download_file.php' File Disclosure

CVE-2007-6400—webappsphp

Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

@lex Guestbook 4.0.2 - Remote Command Execution

CVE-2007-0202—webappsphp

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

bloofox 0.3 - SQL Injection / File Disclosure

CVE-2008-0427—webappsphp

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Flowchart ActiveX Control 2.0 - Insecure Method

CVE-2007-5826—remotewindows

Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

CVE-2008-1993—webappsphp

Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - Inspect Element Denial of Service

CVE-2008-6997—doswindows

Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Weblosninger 4 - Cross-Site Scripting / SQL Injection

CVE-2008-2506—webappsphp

Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.1 - Remote File Attachment / Local File Inclusion

CVE-2007-4908—webappsphp

Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mercury/32 4.52 IMAPD - 'SEARCH' (Authenticated) Overflow

CVE-2007-5018—remotewindows

Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gradman 0.1.3 - 'agregar_info.php' Local File Inclusion

CVE-2008-0361—webappsphp

Directory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

LunarPoll 1.0 - 'show.php?PollDir' Remote File Inclusion

CVE-2007-0298—webappsphp

PHP remote file inclusion vulnerability in show.php in LunarPoll, when register_globals is enabled, allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

idmos-phoenix CMS - 'aural.php' Remote File Inclusion

CVE-2007-5294—webappsphp

PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

HispaH Model Search - 'cat.php?cat' SQL Injection

CVE-2008-2537—webappsphp

SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload

CVE-2009-1609—webappsphp

Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyFTPD 1.4 - 'USER' Remote Buffer Overflow (Denial of Service) (PoC)

CVE-2006-7007—doswindows

Buffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service (daemon crash) via a l

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.