Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.211exploits catalogados

36.421CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 23.022GitHub PoC 15.027VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Easysitenetwork Recipe - 'categoryId' SQL Injection

CVE-2008-0453—webappsphp

SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Liquid-Silver CMS 0.1 - 'update' Local File Inclusion

CVE-2008-0459—webappsphp

Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

OneCMS 2.4 - 'abc' SQL Injection

CVE-2007-5016—webappsphp

SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Airsensor M520 - HTTPd Remote Denial of Service / Buffer Overflow (PoC)

CVE-2007-5036—doshardware

Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated

23RISCO

abrir ↗

Referência✓ VexDay Proof

neuron news 1.0 - 'index.php?q' Local File Inclusion

CVE-2007-5050—webappsphp

Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhFiTo 1.3.0 - 'SRC_PATH' Remote File Inclusion

CVE-2007-5157—webappsphp

PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser (PhFiTo) 1.3.0 in phpFido

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Links 1.3 - 'id' SQL Injection

CVE-2008-0565—webappsphp

SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_downloads - SQL Injection

CVE-2008-0652—webappsphp

SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

FaceBook PhotoUploader - 'ImageUploader4.ocx 4.5.57.0' Remote Buffer Overflow

CVE-2008-0660—remotewindows

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0,

35RISCO

abrir ↗

Referência✓ VexDay Proof

The Everything Development System Pre-1.0 - SQL Injection

CVE-2008-0675—webappsphp

SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pr

23RISCO

abrir ↗

Referência✓ VexDay Proof

FSFDT v3.000 d9 - 'HELP' Remote Buffer Overflow

CVE-2007-5256—remotewindows

Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_Marketplace 1.1.1 - SQL Injection

CVE-2008-0689—webappsphp

SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla!

23RISCO

abrir ↗

Referência✓ VexDay Proof

BookmarkX script 2007 - 'topicid' SQL Injection

CVE-2008-0695—webappsphp

SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

ImageStation - 'SonyISUpload.cab 1.0.0.38' ActiveX Buffer Overflow (PoC)

CVE-2008-0748—doswindows

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyIS

28RISCO

abrir ↗

Referência✓ VexDay Proof

PhpBlock a8.4 - 'PATH_TO_CODE' Remote File Inclusion

CVE-2008-1776—webappsphp

PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote att

28RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Forum Service - 'forum' SQL Injection

CVE-2008-1789—webappsphp

SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi Pro 6.25 Poll - 'poll_id' SQL Injection

CVE-2008-2036—webappsphp

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

AlkalinePHP 0.80.00 Beta - 'thread.php' SQL Injection

CVE-2008-2395—webappsphp

SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

FicHive 1.0 - 'category' Blind SQL Injection

CVE-2008-2416—webappsphp

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

1Book Guestbook Script 1.0.1 - Code Execution

CVE-2008-2638—webappsphp

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

emagiC CMS.Net 4.0 - 'emc.asp' SQL Injection

CVE-2007-5783—webappsasp

SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

CaupoShop Pro 2.x - 'action' Remote File Inclusion

CVE-2007-5784—webappsphp

PHP remote file inclusion vulnerability in index.php in CaupoShop Pro 2.x allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Link Directory Script - SQL Injection

CVE-2007-5996—webappsphp

SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClipShare < 3.0.1 - 'tid' SQL Injection

CVE-2008-2793—webappsphp

SQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

doITlive CMS 2.50 - SQL Injection / Cross-Site Scripting

CVE-2008-2842—webappsasp

Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

BoatScripts Classifieds - 'type' SQL Injection

CVE-2008-2846—webappsphp

SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

project alumni 1.0.9 - Cross-Site Scripting / SQL Injection

CVE-2007-6126—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

WorkingOnWeb 2.0.1400 - 'events.php' SQL Injection

CVE-2007-6128—webappsphp

SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Content Injector 1.52 - 'index.php?cat' SQL Injection

CVE-2007-6137—webappsphp

SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Debian OpenSSH - (Authenticated) Remote SELinux Privilege Escalation

CVE-2008-3234—remotelinux

sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain ac

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.