Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Dovecot IMAP 1.0.10 < 1.1rc2 - Remote Email Disclosure

CVE-2008-1218—remotemultiple

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bloo 1.00 - Multiple SQL Injections

CVE-2008-1313—webappsphp

Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickTalk Forum 1.6 - Blind SQL Injection

CVE-2008-1316—webappsphp

SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aperto Blog 0.1.1 - Local File Inclusion / SQL Injection

CVE-2008-5775—webappsphp

SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

CadeNix - SQL Injection

CVE-2008-5777—webappsphp

SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the ci

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyCalendar 4.0tr - Multiple Vulnerabilities

CVE-2008-1344—webappsphp

Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyGallery 5.0tr - Multiple Vulnerabilities

CVE-2008-1347—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fully Modded phpBB - 'kb.php' SQL Injection

CVE-2008-1350—webappsphp

SQL injection vulnerability in kb.php in Fully Modded phpBB (phpbbfm) 80220 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

iGaming CMS 1.5 - Multiple SQL Injections

CVE-2008-5841—webappsphp

Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module tutorials 2.1b - 'printpage.php' SQL Injection

CVE-2008-1351—webappsphp

SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alt-N MDaemon IMAP server 9.6.4 - 'FETCH' Remote Buffer Overflow

CVE-2008-1358—remotewindows

Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to

50RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.2.1 - 'X-Forwarded-For' HTTP Header Blind SQL Injection

CVE-2008-1398—webappsphp

SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

MG-SOFT Net Inspector 6.5.0.828 - Multiple Vulnerabilities

CVE-2008-1402—remotewindows

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1) denial of service (except

23RISCO

abrir ↗

Referência✓ VexDay Proof

eXV2 Module Viso 2.0.4.3 - 'kid' SQL Injection

CVE-2008-1404—webappsphp

SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime CMS 3.01 - 'admindir' Remote File Inclusion

CVE-2008-1405—webappsphp

PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute a

35RISCO

abrir ↗

Referência✓ VexDay Proof

acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer

CVE-2008-1410—remotewindows

Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAuction GPL Enhanced 2.51 - Multiple Remote File Inclusions

CVE-2008-1416—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PH

35RISCO

abrir ↗

Referência✓ VexDay Proof

Easy-Clanpage 2.2 - 'id' SQL Injection

CVE-2008-1425—webappsphp

SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

KAPhotoservice - 'album.asp' SQL Injection

CVE-2008-1426—webappsasp

SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

BIND 9.4.1 < 9.4.2 - Remote DNS Cache Poisoning (Metasploit)

CVE-2008-1447—remotemultiple

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windo

60RISCO

abrir ↗

Referência✓ VexDay Proof

BIND 9.x - Remote DNS Cache Poisoning

CVE-2008-1447—remotemultiple

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windo

60RISCO

abrir ↗

Referência✓ VexDay Proof

BIND 9.x - Remote DNS Cache Poisoning

CVE-2008-1447—remotemultiple

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windo

60RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS Module section - 'artid' SQL Injection

CVE-2008-1462—webappsphp

SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP iCalendar 2.24 - 'cookie_language' Local File Inclusion / Arbitrary File Upload

CVE-2008-5968—webappsphp

Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Home FTP Server 1.4.5 - Remote Denial of Service

CVE-2008-1478—doswindows

Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode conn

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunOS 5.10 Sun Cluster - 'rpc.metad' Denial of Service (PoC)

CVE-2008-1480—dossolaris

rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC requ

23RISCO

abrir ↗

Referência✓ VexDay Proof

PunBB 1.2.16 - Blind Password Recovery

CVE-2008-1484—webappsphp

The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which a

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASUS DPC Proxy 2.0.0.16/19 - Remote Buffer Overflow

CVE-2008-1491—remotewindows

Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 an

60RISCO

abrir ↗

Referência✓ VexDay Proof

PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload

CVE-2008-1495—webappsphp

Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote auth

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetWin Surgemail 3.8k4-4 - IMAP (Authenticated) Remote LIST Universal

CVE-2008-1498—remotewindows

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated user

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.