Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.900exploits catalogados

36.847CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8.946Nuclei 4.390Metasploit 3.501✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

CVE-2008-1993—webappsphp

Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - Inspect Element Denial of Service

CVE-2008-6997—doswindows

Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Weblosninger 4 - Cross-Site Scripting / SQL Injection

CVE-2008-2506—webappsphp

Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.1 - Remote File Attachment / Local File Inclusion

CVE-2007-4908—webappsphp

Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mercury/32 4.52 IMAPD - 'SEARCH' (Authenticated) Overflow

CVE-2007-5018—remotewindows

Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gradman 0.1.3 - 'agregar_info.php' Local File Inclusion

CVE-2008-0361—webappsphp

Directory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

LunarPoll 1.0 - 'show.php?PollDir' Remote File Inclusion

CVE-2007-0298—webappsphp

PHP remote file inclusion vulnerability in show.php in LunarPoll, when register_globals is enabled, allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

idmos-phoenix CMS - 'aural.php' Remote File Inclusion

CVE-2007-5294—webappsphp

PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

HispaH Model Search - 'cat.php?cat' SQL Injection

CVE-2008-2537—webappsphp

SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload

CVE-2009-1609—webappsphp

Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyFTPD 1.4 - 'USER' Remote Buffer Overflow (Denial of Service) (PoC)

CVE-2006-7007—doswindows

Buffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service (daemon crash) via a l

23RISCO

abrir ↗

Referência✓ VexDay Proof

XCMS 1.82 - Local/Remote File Inclusion

CVE-2007-6604—webappsphp

Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to read arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenDock Easy Blog 1.4 - 'doc_directory' File Inclusion

CVE-2006-5244—webappsphp

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register_globals is enabl

23RISCO

abrir ↗

Referência✓ VexDay Proof

CPCommerce 1.1.0 - Cross-Site Scripting / Local File Inclusion

CVE-2008-1908—webappsphp

Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Visit Counter 0.4 - 'datespan' SQL Injection

CVE-2008-2556—webappsphp

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tizag Countdown Creator 3 - Insecure Upload

CVE-2008-6492—webappsphp

Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

AlsaPlayer < 0.99.80-rc3 - Vorbis Input Local Buffer Overflow

CVE-2007-5301—locallinux

Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in Alsa

28RISCO

abrir ↗

Referência✓ VexDay Proof

427bb 2.3.1 - SQL Injection / Cross-Site Scripting

CVE-2008-2560—webappsphp

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

YouTube blog 0.1 - Remote File Inclusion / SQL Injection / Cross-Site Scripting

CVE-2008-3305—webappsphp

Cross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke pnFlashGames Module 1.5 - SQL Injection

CVE-2007-2427—webappsphp

SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

TLM CMS 3.2 - Multiple SQL Injections

CVE-2007-4808—webappsphp

Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via (1) t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Libc - 'libc:fts_*()' Local Denial of Service

CVE-2009-0537—dosbsd

Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpEventMan 1.0.2 - 'level' Remote File Inclusion

CVE-2007-0702—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhpHostBot 1.06 - 'svr_rootscript' Remote File Inclusion

CVE-2007-4231—webappsphp

PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 module 123 flash chat 6.8.0 - Remote File Inclusion

CVE-2008-1989—webappsphp

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_g

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Jotloader 1.2.1.a - Blind SQL Injection

CVE-2008-2564—webappsphp

SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

MailBee Objects 5.5 - 'MailBee.dll' Remote Insecure Method

CVE-2008-0631—remotewindows

Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

FrontAccounting 1.13 - Remote File Inclusion

CVE-2007-5117—webappsphp

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Creator CMS 5.0 - 'sideid' SQL Injection

CVE-2008-7001—webappsasp

Unrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0 allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

SezHoo 0.1 - Remote File Inclusion

CVE-2008-4704—webappsphp

PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arb

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.