Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.201exploits catalogados

36.413CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 23.022GitHub PoC 15.017VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Joomla! Component PU Arcade 2.1.3 - SQL Injection

CVE-2007-6663—webappsphp

SQL injection vulnerability in (1) Puarcade.php and (2) PUarcade.html.php in Pragmatic Utopia PU Arcade (com_puarcade) 2

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmyGallery 1.0beta2 - Local/Remote File Inclusion

CVE-2008-6315—webappsphp

PHP remote file inclusion vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection

CVE-2008-0440—webappsphp

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMSbright - 'id_rub_page' SQL Injection

CVE-2008-6991—webappsphp

SQL injection vulnerability in public/page.php in Websens CMSbright allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPRunner 4.2 - 'SearchOption' Blind SQL Injection

CVE-2009-0963—webappsphp

Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS NetCat 3.12 - Multiple Vulnerabilities

CVE-2008-5742—webappsphp

Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Intel 2200BG 802.11 - disassociation packet Kernel Memory Corruption

CVE-2007-0686—doswindows

The Intel 2200BG 802.11 Wireless Mini-PCI driver 9.0.3.9 (w29n51.sys) allows remote attackers to cause a denial of servi

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPfan 3.3.4 - 'init.php' Remote File Inclusion

CVE-2008-6251—webappsphp

PHP remote file inclusion vulnerability in includes/init.php in phpFan 3.3.4 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenInvoice 0.9 - Arbitrary Change User Password

CVE-2008-6524—webappsphp

resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dagger CMS 2008 - 'dir_inc' Remote File Inclusion

CVE-2008-6635—webappsphp

PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when re

23RISCO

abrir ↗

Referência✓ VexDay Proof

wpQuiz 2.7 - Multiple SQL Injections

CVE-2007-6172—webappsphp

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component gigCalendar 1.0 - SQL Injection

CVE-2009-0726—webappsphp

SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

123tkShop 0.9.1 - Remote Authentication Bypass

CVE-2007-6458—webappsphp

SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetHoteles 3.0 - 'ficha.php' SQL Injection

CVE-2009-1346—webappsphp

SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

IntelliTamper 2.07/2.08 Beta 4 - A HREF Remote Buffer Overflow

CVE-2008-3360—remotewindows

Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code

23RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.2.0c - Bypass BBCode Cross-Site Scripting Cookie Stealing

CVE-2009-1408—webappsphp

Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HT

23RISCO

abrir ↗

Referência✓ VexDay Proof

bwired - 'index.php?newsID' SQL Injection

CVE-2007-3978—webappsphp

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID paramet

23RISCO

abrir ↗

Referência✓ VexDay Proof

makit Newsposter Script 3.0 - SQL Injection

CVE-2007-0600—webappsasp

SQL injection vulnerability in news_page.asp in Martyn Kilbryde Newsposter Script (aka makit news/blog poster) 3 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apartment Search Script - 'listtest.php' SQL Injection

CVE-2008-1919—webappsphp

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Particle Blogger 1.2.0 - 'post.php?postid' SQL Injection

CVE-2007-1510—webappsphp

SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Getacoder clone - 'sb_protype' SQL Injection

CVE-2008-3372—webappsphp

SQL injection vulnerability in search_form.php in Getacoder Clone allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

InoutMailingListManager 3.1 - Remote Command Execution

CVE-2007-2002—webappsphp

InoutMailingListManager 3.1 and earlier allows remote attackers to access certain restricted functionality, and upload a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke 8.0 Final - 'sid' SQL Injection

CVE-2008-0461—webappsphp

SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc i

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Datsogallery 1.6 - Blind SQL Injection

CVE-2008-5208—webappsphp

SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 Membership Manager Pro - Authentication Bypass

CVE-2008-6371—webappsphp

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

BrewBlogger 2.1.0.1 - Arbitrary Add Admin

CVE-2008-6911—webappsphp

SQL injection vulnerability in the authenticateUser function in includes/authentication.inc.php in BrewBlogger (BB) 2.1.

23RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection

CVE-2008-2084—webappsphp

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPHoo3 < 5.2.6 - 'viewCat' SQL Injection

CVE-2008-3245—webappsphp

SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScozNews 1.2.1 - 'mainpath' Remote File Inclusion

CVE-2006-2487—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP infoboard 7 plus - Multiple Vulnerabilities

CVE-2008-4332—webappsphp

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.