Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.230exploits catalogados

36.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8.860Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Wireshark < 0.99.5 - DNP3 Dissector Infinite Loop

CVE-2007-6113—doslinux

Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

ExBB 0.22 - Local/Remote File Inclusion

CVE-2008-1861—webappsphp

Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_gl

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active PHP Bookmark Notes 0.2.5 - Remote File Inclusion

CVE-2007-1621—webappsphp

PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes (APB) 0.2.5 and earlier allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bankoi Webhost Panel 1.20 - Authentication Bypass

CVE-2008-6950—webappsasp

Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Clever Internet ActiveX Suite 6.2 - Arbitrary File Download/Overwrite

CVE-2007-4067—remotewindows

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Inter

23RISCO

abrir ↗

Referência✓ VexDay Proof

ooVoo 1.7.1.35 - 'URL Protocol' Remote Unicode Buffer Overflow (PoC)

CVE-2008-6953—doswindows

Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sun xVM VirtualBox < 1.6.4 - Privilege Escalation (PoC)

CVE-2008-3431HIGHsob ataquedosmultiple

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communicat

71RISCO

abrir ↗

Referência✓ VexDay Proof

DFLabs PTK 1.0 - Local Command Execution

CVE-2008-6793—webappsphp

The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discuz! - Remote Reset User Password

CVE-2008-6957—webappsphp

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostp

23RISCO

abrir ↗

Referência✓ VexDay Proof

Site Sift Listings - 'id' SQL Injection

CVE-2008-1869—webappsphp

SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id p

23RISCO

abrir ↗

Referência✓ VexDay Proof

PMB Services 3.0.13 - Multiple Remote File Inclusions

CVE-2007-1415—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Remote Buffer Overflow

CVE-2008-4048—remotewindows

Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPo

23RISCO

abrir ↗

Referência✓ VexDay Proof

X10media Mp3 Search Engine 1.6 - Remote File Disclosure

CVE-2008-6960—webappsphp

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.5 - Authentication Bypass

CVE-2008-6964—webappsphp

SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Links Directory 1.1 - 'cat_id' SQL Injection

CVE-2008-1871—webappsphp

SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Multiple Vulnerabilities

CVE-2008-6978—webappsasp

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Arbitrary File Upload / SQL Injection / Cross-Site Scripting

CVE-2008-6978—webappsphp

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - 'SaveAs' Remote Buffer Overflow

CVE-2008-6994—remotewindows

Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.14

28RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 0.2.149.27 - Automatic File Download

CVE-2008-6996—remotewindows

Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

KnowledgeQuest 2.5 - Arbitrary Add Admin

CVE-2008-1727—webappsphp

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome - Carriage Return Null Object Memory Exhaustion

CVE-2008-4340—doswindows

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBBViet 02.03.2007 - 'phpbb_root_path' Remote File Inclusion

CVE-2007-6088—webappsphp

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

VideoScript 4.0.1.50 - Change Admin Password

CVE-2008-5219—webappsphp

The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authent

23RISCO

abrir ↗

Referência✓ VexDay Proof

falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting

CVE-2007-6489—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Rat CMS Alpha 2 - Authentication Bypass

CVE-2008-7003—webappsphp

Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

PassWiki 0.9.16 RC3 - 'site_id' Local File Inclusion

CVE-2008-6423—webappsphp

Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

SkaLinks 1.5 - 'register.php' Arbitrary Add Editor

CVE-2008-7010—webappsphp

Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Photo Gallery 1.0 - 'photo_id' SQL Injection

CVE-2008-1875—webappsphp

SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebED 0.0.9 - 'index.php' Remote File Disclosure

CVE-2007-6213—webappsphp

Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling

CVE-2008-7019—webappsphp

Esqlanelapse 2.6.1 and 2.6.2 allows remote attackers to bypass authentication and gain privileges via modified (1) enomb

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.