Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

SMA-DB 0.3.13 - Multiple Remote File Inclusions

CVE-2009-1452—webappsphp

Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tiny Blogr 1.0.0 rc4 - Authentication Bypass

CVE-2009-1453—webappsphp

SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pragyan CMS 2.6.4 - Multiple SQL Injections

CVE-2009-1480—webappsphp

SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flatchat 3.0 - 'pmscript.php' Local File Inclusion

CVE-2009-1486—webappsphp

Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

fungamez rc1 - Authentication Bypass / Local File Inclusion

CVE-2009-1488—webappsphp

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Invision Power Board 2.0.3 - 'login.php' SQL Injection

CVE-2005-1598—webappsphp

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary

28RISCO

abrir ↗

Referência✓ VexDay Proof

Check New 4.52 - SQL Injection

CVE-2008-5586—webappsphp

SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpPgAdmin 4.2.1 - '_language' Local File Inclusion

CVE-2008-5587—webappsphp

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is ena

43RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe Reader 8.1.4/9.1 - 'GetAnnots()' Remote Code Execution

CVE-2009-1492—remotelinux

The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote

28RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe 8.1.4/9.1 - 'customDictionaryOpen()' Code Execution

CVE-2009-1493—remotelinux

The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and

28RISCO

abrir ↗

Referência✓ VexDay Proof

Merlix Teamworx Server - File Disclosure/Bypass

CVE-2008-5599—webappsphp

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kusaba 1.0.4 - Remote Code Execution (1)

CVE-2008-5663—webappsphp

Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Cmimarketplace - 'viewit' Directory Traversal

CVE-2009-1496—webappsphp

Directory traversal vulnerability in the Cmi Marketplace (com_cmimarketplace) component 0.1 for Joomla! allows remote at

38RISCO

abrir ↗

Referência✓ VexDay Proof

GOM Player 2.1.16.6134 - Subtitle Local Buffer Overflow (PoC)

CVE-2009-1497—doswindows

Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

S-CMS 1.1 Stable - 'page' Local File Inclusion

CVE-2009-1502—webappsphp

Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

eLitius 1.0 - 'banner-details.php?id' SQL Injection

CVE-2009-1506—webappsphp

SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

X-Forum 0.6.2 - Remote Command Execution

CVE-2009-1508—webappsphp

SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft GDI Plugin - '.png' Infinite Loop Denial of Service (PoC)

CVE-2009-1511—doswindows

GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file tha

28RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 1.0.154.53 - Null Pointer Remote Crash

CVE-2009-1514—doswindows

Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application

23RISCO

abrir ↗

Referência✓ VexDay Proof

Icewarp Merak Mail Server 9.4.1 - 'Base64FileEncode()' Buffer Overflow (PoC)

CVE-2009-1516—doswindows

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1

23RISCO

abrir ↗

Referência✓ VexDay Proof

Norton Ghost Support module for EasySetup wizard - Remote Denial of Service (PoC)

CVE-2009-1517—doswindows

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in

23RISCO

abrir ↗

Referência✓ VexDay Proof

pecio CMS 1.1.5 - 'index.php?language' Local File Inclusion

CVE-2009-1519—webappsphp

Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

AGTC MyShop 3.2 - Insecure Cookie Handling

CVE-2009-1549—webappsphp

AGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative access setting the log_accep

23RISCO

abrir ↗

Referência✓ VexDay Proof

Qt QuickTeam - Multiple Remote File Inclusions

CVE-2009-1551—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP cod

28RISCO

abrir ↗

Referência✓ VexDay Proof

TemaTres 1.0.3 - Blind SQL Injection

CVE-2009-1584—webappsphp

Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Grabit 1.7.2 Beta 3 - '.nzb' Local Buffer Overflow (SEH)

CVE-2009-1586—localwindows

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow (PoC)

CVE-2009-1592—doswindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow

CVE-2009-1592—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Job Script 2.0 - Arbitrary Change Admin Password

CVE-2009-1610—webappsphp

admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator passwo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_lowcosthotels - Blind SQL Injection

CVE-2008-5875—webappsphp

SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.