Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.229exploits catalogados

36.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.030VulnCheck XDB 8.860Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Mambo Component Shambo2 - 'itemID' SQL Injection

CVE-2008-0606—webappsphp

SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)

CVE-2008-0590—doswindows

Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of servic

28RISCO

abrir ↗

Referência✓ VexDay Proof

Linux Kernel 2.6.17 < 2.6.24.1 - 'vmsplice' Local Privilege Escalation (2)

CVE-2008-0600—locallinux

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer befo

23RISCO

abrir ↗

Referência✓ VexDay Proof

All Club CMS 0.0.2 - 'index.php' SQL Injection

CVE-2008-0601—webappsphp

SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

All Club CMS 0.0.1f - 'index.php' Local File Inclusion

CVE-2008-0602—webappsphp

Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to inc

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_awesom' 0.3.2 - 'listid' SQL Injection

CVE-2008-0603—webappsphp

SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

RMSOFT Gallery System 2.0 - 'id' SQL Injection

CVE-2008-0611—webappsphp

SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhotoKorn Gallery 1.543 - 'pic' SQL Injection

CVE-2008-0614—webappsphp

SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

NERO Media Player 1.4.0.35b - '.m3u' File Buffer Overflow (PoC)

CVE-2008-0619—doswindows

Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbi

28RISCO

abrir ↗

Referência✓ VexDay Proof

GNUTURK 2G - 't_id' SQL Injection

CVE-2006-4867—webappsphp

SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Update 2.7 - '/admin/uploads.php' Remote Code Execution

CVE-2006-6879—webappsphp

Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated us

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Update 2.7 - Multiple Vulnerabilities

CVE-2006-6879—webappsphp

Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated us

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpunity.postcard - 'gallery_path' Remote File Inclusion

CVE-2006-4869—webappsphp

PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Linux Kernel 2.6.x - 'sys_timer_create()' Local Denial of Service

CVE-2006-7051—doslinux

The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ipswitch WS_FTP LE 5.08 - PASV Response Remote Buffer Overflow

CVE-2006-4974—remotewindows

Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a l

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpQuiz 0.1.2 - SQL Injection / Code Execution

CVE-2006-4977—webappsphp

Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Besc

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web-News 1.6.3 - 'template.php' Remote File Inclusion

CVE-2006-5053—webappsphp

PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PBLang 4.66z - 'temppath' Remote File Inclusion

CVE-2006-5062—webappsphp

PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Stats 0.1.9.1b - 'ip' SQL Injection

CVE-2006-7172—webappsphp

Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

NaviCOPA Web Server 2.01 - 'GET' Remote Buffer Overflow

CVE-2006-5112—remotewindows

Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HT

50RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyTeam 2.0 - 'smileys_dir' Remote File Inclusion

CVE-2006-5207—webappsphp

PHP remote file inclusion vulnerability in images/smileys/smileys_packs.php in phpMyTeam 2.0, when register_globals is e

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB SpamBlocker Mod 1.0.2 - Remote File Inclusion

CVE-2006-5301—webappsphp

PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for php

23RISCO

abrir ↗

Referência✓ VexDay Proof

Redaction System 1.0 - 'lang_prefix' Remote File Inclusion

CVE-2006-5302—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Transmit.app 3.5.5 - 'ftps://' URL Handler Heap Buffer Overflow (PoC)

CVE-2007-0020—dososx

Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yahoo! Music Jukebox 2.2 - 'AddImage()' ActiveX Remote Buffer Overflow (1)

CVE-2008-0623—remotewindows

Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yahoo! Music Jukebox 2.2 - 'AddImage()' ActiveX Remote Buffer Overflow (2)

CVE-2008-0623—remotewindows

Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yahoo! Music JukeBox 2.2 - 'AddButton()' ActiveX Remote Buffer Overflow

CVE-2008-0624—remotewindows

Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB News Defilante Horizontale 4.1.1 - Remote File Inclusion

CVE-2006-5415—webappsphp

PHP remote file inclusion vulnerability in includes/functions_newshr.php in the News Defilante Horizontale 4.1.1 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB SearchIndexer Mod - 'archive_topic.php' Remote File Inclusion

CVE-2006-5418—webappsphp

PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Specimen Image Database - 'client.php' Remote File Inclusion

CVE-2006-5419—webappsphp

PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when regis

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.