Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.230exploits catalogados

36.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8.860Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure

CVE-2008-1124—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure

CVE-2008-1125—webappsphp

Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cisco IP Phone 7940 - Reboot (Denial of Service)

CVE-2006-0179—doshardware

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN pack

28RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2)

CVE-2006-0476—remotewindows

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with

60RISCO

abrir ↗

Referência✓ VexDay Proof

jspwiki 2.4.104/2.5.139 - Multiple Vulnerabilities

CVE-2008-1229—webappsjsp

Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

BM Classifieds 20080409 - Multiple SQL Injections

CVE-2008-1272—webappsphp

Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyNewsletter 0.8b5 - 'msg_id' SQL Injection

CVE-2008-1295—webappsphp

SQL injection vulnerability in archives.php in Gregory Kokanosky (aka Greg's Place) phpMyNewsletter 0.8 beta 5 and earli

23RISCO

abrir ↗

Referência✓ VexDay Proof

eXchange POP3 5.0.050203 - RPCT TO Remote Buffer Overflow

CVE-2006-0537—remotewindows

Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execu

35RISCO

abrir ↗

Referência✓ VexDay Proof

EasyCalendar 4.0tr - Multiple Vulnerabilities

CVE-2008-1345—webappsphp

Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

Admbook 1.2.2 - 'x-forwarded-for' Remote Command Execution

CVE-2006-0852—webappsphp

Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

vuBB 0.2 Final - 'cookie' SQL Injection

CVE-2006-0962—webappsphp

SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

Lansuite 2.1.0 Beta - 'fid' SQL Injection

CVE-2006-1001—webappsphp

SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow

CVE-2006-1236—remotelinux

Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrar

28RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.45 - Multiple Vulnerabilities

CVE-2006-1346—webappsphp

Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.45 - Multiple Vulnerabilities

CVE-2006-1348—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

XHP CMS 0.5 - 'upload' Remote Command Execution

CVE-2006-1371—webappsphp

Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea Fil

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Office Products - Array Index Bounds Error (PoC)

CVE-2006-1540—doswindows

MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of

28RISCO

abrir ↗

Referência✓ VexDay Proof

Python 2.4.2 - 'realpath()' Local Stack Overflow

CVE-2006-1542—locallinux

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crafty Syntax Image Gallery 3.1g - Remote Code Execution

CVE-2006-1668—webappsphp

newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Clansys 1.1 (showid) - SQL Injection

CVE-2006-1708—webappsphp

SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simplog 0.9.2 - 's' Remote Command Execution

CVE-2006-1778—webappsphp

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Monster Top List 1.4.2 - 'functions.php?root_path' Remote File Inclusion

CVE-2006-1781—webappsphp

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sphider 1.3 - 'configset.php' Remote File Inclusion

CVE-2006-1784—webappsphp

PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disa

23RISCO

abrir ↗

Referência✓ VexDay Proof

SysInfo 1.21 - 'sysinfo.cgi' Remote Command Execution

CVE-2006-1832—webappscgi

sysinfo.cgi in sysinfo 1.21 allows remote attackers to obtain the installation path via the debugger action.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuju News 1.0 - Authentication Bypass / SQL Injection

CVE-2006-1837—webappsphp

SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Internet PhotoShow 1.3 - 'page' Remote File Inclusion

CVE-2006-1919—webappsphp

PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fast Click 1.1.3/2.3.8 - 'show.php' Remote File Inclusion

CVE-2006-2175—webappsphp

PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

XM Easy Personal FTP Server 1.0 - 'Port' Remote Overflow (PoC)

CVE-2006-2226—doswindows

Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of serv

23RISCO

abrir ↗

Referência✓ VexDay Proof

TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (2)

CVE-2006-2151—webappsphp

PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enab

28RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0 - 'help_file' Remote Command Execution

CVE-2006-2156—webappsphp

Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitr

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.